chore(deps): update helm release alloy to v1.7.0

.gitea/workflows/render-manifests.yaml

@@ -50,7 +50,7 @@ jobs:
           cache: true
 
       - name: Configure Kubeconfig
-        uses: azure/k8s-set-context@89b837d75b40a7bd2ddafde837473c212db8b313 # v5
+        uses: azure/k8s-set-context@ae59a723ba9abe7a9655538854a025448dbab4aa # v4
         with:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
@@ -273,7 +273,7 @@ jobs:
                   NAMESPACE="argocd"
                   echo ">> Special Rendering into 'argocd' namespace ..."
                   ;;
-                "cilium" | "coredns" | "metrics-server")
+                "cilium" | "coredns" | "metrics-server" | "prometheus-operator-crds")
                   NAMESPACE="kube-system"
                   echo ">> Special Rendering for ${CHART_NAME} into 'kube-system' namespace ..."
                   ;;
@@ -283,7 +283,7 @@ jobs:
 
               echo ">> Formating rendered template ..."
               local TEMPLATE
-              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1,monitoring.coreos.com/v1")
+              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute")
 
               # Format and split rendered template
               echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
@@ -314,7 +314,7 @@ jobs:
           for DIR in ${RENDER_DIR}; do
             echo "${DIR}"
 
-          done | xargs -P 5 -I {} bash -c 'OUT=$(render_chart "$@" 2>&1); printf "%s\n" "$OUT"' _ {}
+          done | xargs -P 4 -I {} bash -c 'OUT=$(render_chart "$@" 2>&1); printf "%s\n" "$OUT"' _ {}
 
           echo ""
           echo "----"

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.110.4@sha256:7ad99abc53b30d3f6e34df88b3e2b2b75436bba9b290e90d367356526034496f
+    container: ghcr.io/renovatebot/renovate:43.104.0@sha256:20543dec1eaca2d5e10f9225f3112a1a4d8bcbd3af73acb6a552cf6569692cbb
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.4.0
+appVersion: 26.3.0

clusters/cl01tl/helm/actual/values.yaml

@@ -8,7 +8,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.4.0@sha256:b0e732e2c41b3dc468a71548e88ef76d3f0c157fc43d15fa05d14ec1c5747e1e
+            tag: 26.3.0@sha256:eb8bc26f53025e07e464594c12d77c52c4b95840c8dadd9b95c4f0c4660f8ad2
           env:
             - name: ACTUAL_PORT
               value: 5006

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -0,0 +1,12 @@
+dependencies:
+- name: argo-workflows
+  repository: https://argoproj.github.io/argo-helm
+  version: 1.0.6
+- name: argo-events
+  repository: https://argoproj.github.io/argo-helm
+  version: 2.4.21
+- name: postgres-cluster
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 7.11.1
+digest: sha256:a249bd8faad886fa267cb42e843fd6465b3c4147961d182b73dd64ef9e6ca06e
+generated: "2026-03-31T18:36:18.025982-05:00"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -0,0 +1,32 @@
+apiVersion: v2
+name: argo-workflows
+version: 1.0.0
+description: Argo Workflows
+keywords:
+  - argo-workflows
+  - argo-events
+  - workflows
+  - events
+home: https://docs.alexlebens.dev/applications/argo-workflows/
+sources:
+  - https://github.com/argoproj/argo-workflows
+  - https://github.com/argoproj/argo-events
+  - https://github.com/argoproj/argo-helm/tree/main/charts/argo-workflows
+  - https://github.com/argoproj/argo-helm/tree/main/charts/argo-events
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: argo-workflows
+    version: 1.0.6
+    repository: https://argoproj.github.io/argo-helm
+  - name: argo-events
+    version: 2.4.21
+    repository: https://argoproj.github.io/argo-helm
+  - name: postgres-cluster
+    alias: postgres-18-cluster
+    version: 7.11.1
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
+# renovate: datasource=github-releases depName=argoproj/argo-workflows
+appVersion: v4.0.3

clusters/cl01tl/helm/argo-workflows/templates/external-secret.yaml

@@ -1,10 +1,10 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: ntfy-config-secret
+  name: argo-workflows-oidc-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: ntfy-config-secret
+    app.kubernetes.io/name: argo-workflows-oidc-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -12,7 +12,11 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: attachment-cache-dir
+    - secretKey: secret
       remoteRef:
-        key: /garage/home-infra/ntfy-attachments
-        property: attachment-cache-dir
+        key: /authentik/oidc/argo-workflows
+        property: secret
+    - secretKey: client
+      remoteRef:
+        key: /authentik/oidc/argo-workflows
+        property: client

clusters/cl01tl/helm/argo-workflows/values.yaml

@@ -0,0 +1,109 @@
+argo-workflows:
+  crds:
+    install: true
+    keep: true
+    full: true
+    upgradeJob:
+      image:
+        repository: registry.k8s.io/kubectl
+        tag: v1.35.3
+  controller:
+    metricsConfig:
+      enabled: true
+    persistence:
+      postgresql:
+        host: argo-workflows-postgresql-18-cluster-rw
+        port: 5432
+        database: app
+        tableName: app
+        userNameSecret:
+          name: argo-workflows-postgresql-18-cluster-app
+          key: username
+        passwordSecret:
+          name: argo-workflows-postgresql-18-cluster-app
+          key: password
+        ssl: false
+        sslMode: disable
+    workflowWorkers: 2
+    workflowTTLWorkers: 2
+    podCleanupWorkers: 2
+    cronWorkflowWorkers: 2
+    resources:
+      requests:
+        cpu: 1m
+        memory: 20Mi
+    serviceMonitor:
+      enabled: true
+    workflowNamespaces:
+      - argo-workflows
+  server:
+    authModes:
+      - sso
+    httproute:
+      enabled: true
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - argo-workflows.alexlebens.net
+      rules:
+        - matches:
+            - path:
+                type: PathPrefix
+                value: /
+    sso:
+      enabled: true
+      issuer: https://authentik.alexlebens.net/application/o/argo-workflows/
+      clientId:
+        name: argo-workflows-oidc-secret
+        key: client
+      clientSecret:
+        name: argo-workflows-oidc-secret
+        key: secret
+      redirectUrl: https://argo-workflows.alexlebens.net/oauth2/callback
+      rbac:
+        enabled: false
+      scopes:
+        - openid
+        - email
+        - profile
+argo-events:
+  crds:
+    install: true
+    keep: true
+  controller:
+    resources:
+      requests:
+        cpu: 1m
+        memory: 32Mi
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+  webhook:
+    enabled: true
+    resources:
+      requests:
+        cpu: 1m
+        memory: 20Mi
+postgres-18-cluster:
+  mode: recovery
+  recovery:
+    method: objectStore
+    objectStore:
+      index: 1
+  backup:
+    objectStore:
+      - name: garage-local
+        index: 1
+        destinationBucket: postgres-backups
+        externalSecretCredentialPath: /garage/home-infra/postgres-backups
+        isWALArchiver: true
+    scheduledBackups:
+      - name: live-backup
+        suspend: false
+        immediate: true
+        schedule: "0 0 14 * * *"
+        backupName: garage-local

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.5.0
-digest: sha256:69daada0822f796cd49eeda2d9e39dd5c0c42bb61b6898af68123c8c49f25fa1
-generated: "2026-04-08T22:05:49.003208408Z"
+  version: 9.4.17
+digest: sha256:17752dbf03861cf70ee31c9a17373a5175656a2edd00ba5fcd3988a195147da8
+generated: "2026-03-28T01:51:34.832601868Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,7 +13,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.0
+    version: 9.4.17
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/argocd/values.yaml

@@ -48,31 +48,31 @@ argo-cd:
         enabled: true
       rules:
         enabled: true
-        spec:
-          - alert: ArgoAppMissing
-            expr: |
-              absent(argocd_app_info) == 1
-            for: 15m
-            labels:
-              severity: critical
-            annotations:
-              summary: "[Argo CD] No reported applications"
-              description: >
-                Argo CD has not reported any applications data for the past 15 minutes which
-                means that it must be down or not functioning properly.  This needs to be
-                resolved for this cloud to continue to maintain state.
-          - alert: ArgoAppNotSynced
-            expr: |
-              argocd_app_info{sync_status!="Synced"} == 1
-            for: 12h
-            labels:
-              severity: warning
-            annotations:
-              summary: "[{{`{{$labels.name}}`}}] Application not synchronized"
-              description: >
-                The application [{{`{{$labels.name}}`}} has not been synchronized for over
-                12 hours which means that the state of this cloud has drifted away from the
-                state inside Git.
+      spec:
+        - alert: ArgoAppMissing
+          expr: |
+            absent(argocd_app_info) == 1
+          for: 15m
+          labels:
+            severity: critical
+          annotations:
+            summary: "[Argo CD] No reported applications"
+            description: >
+              Argo CD has not reported any applications data for the past 15 minutes which
+              means that it must be down or not functioning properly.  This needs to be
+              resolved for this cloud to continue to maintain state.
+        - alert: ArgoAppNotSynced
+          expr: |
+            argocd_app_info{sync_status!="Synced"} == 1
+          for: 12h
+          labels:
+            severity: warning
+          annotations:
+            summary: "[{{`{{$labels.name}}`}}] Application not synchronized"
+            description: >
+              The application [{{`{{$labels.name}}`}} has not been synchronized for over
+              12 hours which means that the state of this cloud has drifted away from the
+              state inside Git.
   dex:
     enabled: true
     resources:

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.2.2
+  version: 2026.2.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:86950b83ac8a4da2a89bb826616857fd5eca017c813d8def0eb905025a6e7687
-generated: "2026-04-08T02:23:25.175388081Z"
+digest: sha256:4b90c5af4cc7f37b04284aafd75ddda1241c71acb726932e7e21520b5bf98543
+generated: "2026-03-31T18:36:26.87524-05:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -18,14 +18,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.2.2
+    version: 2026.2.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -5,7 +5,6 @@ description: Bazarr
 keywords:
   - bazarr
   - subtitles
-  - servarr
 home: https://docs.alexlebens.dev/applications/bazarr/
 sources:
   - https://github.com/morpheus65535/bazarr
@@ -25,5 +24,5 @@ dependencies:
     version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
-# renovate: datasource=github-releases depName=linuxserver/docker-bazarr
-appVersion: v1.5.6-ls342
+# renovate: datasource=github-releases depName=morpheus65535/bazarr
+appVersion: 1.5.6

clusters/cl01tl/helm/blocky/values.yaml

@@ -102,12 +102,14 @@ blocky:
               ;; Application Names
               actual                          IN      CNAME   traefik-cl01tl
               alertmanager                    IN      CNAME   traefik-cl01tl
+              argo-workflows                  IN      CNAME   traefik-cl01tl
               argocd                          IN      CNAME   traefik-cl01tl
               audiobookshelf                  IN      CNAME   traefik-cl01tl
               authentik                       IN      CNAME   traefik-cl01tl
               backrest                        IN      CNAME   traefik-cl01tl
               bazarr                          IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
+              code-server                     IN      CNAME   traefik-cl01tl
               dawarich                        IN      CNAME   traefik-cl01tl
               directus                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
@@ -131,11 +133,11 @@ blocky:
               jellystat                       IN      CNAME   traefik-cl01tl
               kiwix                           IN      CNAME   traefik-cl01tl
               komodo                          IN      CNAME   traefik-cl01tl
-              kyoo                            IN      CNAME   traefik-cl01tl
               languagetool                    IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               medialyze                       IN      CNAME   traefik-cl01tl
+              movie-roulette                  IN      CNAME   traefik-cl01tl
               music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -143,9 +145,9 @@ blocky:
               ollama                          IN      CNAME   traefik-cl01tl
               omni-tools                      IN      CNAME   traefik-cl01tl
               paperless-ngx                   IN      CNAME   traefik-cl01tl
+              photoview                       IN      CNAME   traefik-cl01tl
               plex                            IN      CNAME   traefik-cl01tl
-              postiz-spotlight                IN      CNAME   traefik-cl01tl
-              postiz-temporal                 IN      CNAME   traefik-cl01tl
+              postiz                          IN      CNAME   traefik-cl01tl
               prometheus                      IN      CNAME   traefik-cl01tl
               prowlarr                        IN      CNAME   traefik-cl01tl
               qbittorrent                     IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/code-server/Chart.lock

@@ -0,0 +1,12 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.4.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
+generated: "2026-03-09T22:04:00.58415637Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -0,0 +1,32 @@
+apiVersion: v2
+name: code-server
+version: 1.0.0
+description: Code Server
+keywords:
+  - code-server
+  - code
+home: https://docs.alexlebens.dev/applications/code-server/
+sources:
+  - https://github.com/coder/code-server
+  - https://github.com/linuxserver/docker-code-server
+  - https://github.com/linuxserver/docker-code-server/pkgs/container/code-server
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: code-server
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.4.0
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
+# renovate: datasource=github-releases depName=coder/code-server
+appVersion: 4.112.0

clusters/cl01tl/helm/code-server/templates/external-secret.yaml

@@ -0,0 +1,22 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: codeserver-password-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: codeserver-password-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: PASSWORD
+      remoteRef:
+        key: /cl01tl/code-server/auth
+        property: PASSWORD
+    - secretKey: SUDO_PASSWORD
+      remoteRef:
+        key: /cl01tl/code-server/auth
+        property: SUDO_PASSWORD

clusters/cl01tl/helm/code-server/values.yaml

@@ -0,0 +1,83 @@
+code-server:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
+      containers:
+        main:
+          image:
+            repository: ghcr.io/linuxserver/code-server
+            tag: 4.112.0-ls325@sha256:a17ee95f4e1b43284fe5dfea99e82c8a26f096534215ff36817fa80161eec220
+          env:
+            - name: TZ
+              value: America/Chicago
+            - name: PUID
+              value: 1000
+            - name: PGID
+              value: 1000
+            - name: DEFAULT_WORKSPACE
+              value: /config
+          envFrom:
+            - secretRef:
+                name: codeserver-password-secret
+          resources:
+            requests:
+              cpu: 1m
+              memory: 40Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 8443
+          targetPort: 8443
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - code-server.alexlebens.net
+      rules:
+        - backendRefs:
+            - name: code-server
+              port: 8443
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    config:
+      forceRename: code-server-config
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 2Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /config
+              readOnly: false
+volsync-target-config:
+  pvcTarget: code-server-config
+  moverSecurityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    fsGroup: 1000
+    fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 16 8 * * *
+  remote:
+    enabled: true
+    schedule: 16 9 * * *
+  external:
+    enabled: true
+    schedule: 16 10 * * *

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:b070640b7006e3ad528193ca784cfbca602994c87afbef4ef4b40a05229cab10
-generated: "2026-04-04T21:01:27.376484-05:00"
+digest: sha256:1f513bd53430dd0fbba301ab5577aca85e984394dfdca9f615aae944a09c6bc0
+generated: "2026-03-31T18:37:35.858603-05:00"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.6.1
+appVersion: 1.6.0

clusters/cl01tl/helm/dawarich/values.yaml

@@ -8,7 +8,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429
+            tag: 1.6.0@sha256:5cba4d96fb57976fb6a956b8622365789d74a1178cc3ada1cb7541a4473993a9
           command:
             - "web-entrypoint.sh"
           args:
@@ -111,7 +111,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429
+            tag: 1.6.0@sha256:5cba4d96fb57976fb6a956b8622365789d74a1178cc3ada1cb7541a4473993a9
           command:
             - "sidekiq-entrypoint.sh"
           args:

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -8,7 +8,6 @@ keywords:
 home: https://docs.alexlebens.dev/applications/descheduler/
 sources:
   - https://github.com/kubernetes-sigs/descheduler
-  - https://explore.ggcr.dev/?repo=registry.k8s.io%2Fdescheduler%2Fdescheduler
   - https://github.com/kubernetes-sigs/descheduler/tree/master/charts/descheduler
 maintainers:
   - name: alexlebens

clusters/cl01tl/helm/descheduler/values.yaml

@@ -1,7 +1,4 @@
 descheduler:
-  image:
-    repository: registry.k8s.io/descheduler/descheduler
-    tag: v0.35.1@sha256:871d3b804390b0b8c7cb09d4e9b7856cf30e31f9e9e3d29562b0301a10453bb1
   kind: Deployment
   resources:
     limits:

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:5fa84b2d82a160c35e002690e4d299275b8136463da9da789be9ca7c6ff998c4
-generated: "2026-04-04T21:01:37.322862-05:00"
+digest: sha256:116183cdff428293215553b7e60be9aefafbbaaaf64c01f1fc974badd3e0754b
+generated: "2026-03-31T18:37:42.414041-05:00"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.17.2
+appVersion: 11.17.1

clusters/cl01tl/helm/directus/values.yaml

@@ -8,7 +8,8 @@ directus:
         main:
           image:
             repository: ghcr.io/directus/directus
-            tag: 11.17.2@sha256:5e5978377f1cc9820ffc5b92597da1573a1350ea57f8aba42efd999139993874
+            tag: 11.17.1@sha256:1dd2080a50a9f6df2b6f49df15a7734424bbd1a5902983c4b6e447f22027b80b
+            pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
               value: https://directus.alexlebens.net

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -18,4 +18,4 @@ dependencies:
     repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.2
+appVersion: v3.3.1

clusters/cl01tl/helm/elastic-operator/values.yaml

@@ -1,7 +1,7 @@
 eck-operator:
   managedNamespaces:
-    - stalwart
     - tubearchivist
+    - stalwart
   installCRDs: true
   replicaCount: 2
   resources:

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.34
+  version: 1.4.33
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.4.0
-digest: sha256:376f1201085c5c93972d2286755dd8b530a4a88ad9fdaf4bfb50ec1f11c64df0
-generated: "2026-04-08T17:57:31.040649797Z"
+digest: sha256:63b0e582d42fb42bcf4d96ba4b299e42c434c42f284208596808288543192fe0
+generated: "2026-03-24T16:11:50.424321433Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -15,11 +15,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.34
+    version: 1.4.33
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.4.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.15
+appVersion: v1.12.13

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: ghcr.io/element-hq/element-web
-    tag: v1.12.15@sha256:c7fa40b5ba3891f8af3ce63da0818f457c1802a9ee4d2f5e46a9df36a2388eed
+    tag: v1.12.13@sha256:5107e63026c13ed014f743e485821b7d4b56d275a41e76303859bb14f5f94eb6
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev

clusters/cl01tl/helm/eraser/Chart.lock

@@ -2,8 +2,5 @@ dependencies:
 - name: eraser
   repository: https://eraser-dev.github.io/eraser/charts
   version: 1.4.1
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:8414813d3d9d195b16ef7ebf814f7095a16413f4b0e579fcb37738000624f68c
-generated: "2026-04-08T21:39:05.689756-05:00"
+digest: sha256:da828de684b0cd82e99994586f3db4f55c43c01607c4d8d0e70e204c7bbbbf5b
+generated: "2025-12-03T22:53:20.200917773Z"

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -9,19 +9,13 @@ home: https://docs.alexlebens.dev/applications/eraser/
 sources:
   - https://github.com/eraser-dev/eraser
   - https://github.com/eraser-dev/eraser/pkgs/container/eraser-manager
-  - https://github.com/open-telemetry/opentelemetry-collector-releases/pkgs/container/opentelemetry-collector-releases%2Fopentelemetry-collector
   - https://github.com/eraser-dev/eraser/tree/main/charts/eraser
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
 maintainers:
   - name: alexlebens
 dependencies:
   - name: eraser
     version: 1.4.1
     repository: https://eraser-dev.github.io/eraser/charts
-  - name: app-template
-    alias: eraser-metrics
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
 icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
 # renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/eraser/values.yaml

@@ -35,88 +35,3 @@ eraser:
       requests:
         cpu: 1m
         memory: 20Mi
-eraser-metrics:
-  global:
-    nameOverride: eraser-metrics
-    fullnameOverride: eraser-metrics
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      containers:
-        main:
-          image:
-            repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.149.0@sha256:dd56aed607fd02f8ac01dddb27a859c0c2cc750539abce927803778fafc736ae
-          command:
-            - /otelcol
-            - --config=/conf/otel-collector-config.yaml
-          resources:
-            requests:
-              cpu: 10m
-              memory: 20Mi
-  configMaps:
-    config:
-      enabled: true
-      forceRename: eraser-config
-      data:
-        otel-collector-config.yaml: |
-          receivers:
-            otlp:
-              protocols:
-                http:
-
-          exporters:
-            logging:
-              loglevel: debug
-            prometheus:
-              endpoint: "0.0.0.0:8889"
-              send_timestamps: true
-              metric_expiration: 180m
-
-          service:
-            telemetry:
-              logs:
-                encoding: json
-            pipelines:
-              metrics:
-                receivers:
-                  - otlp
-                exporters:
-                  - logging
-                  - prometheus
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 4318
-          targetPort: 4318
-        metrics:
-          port: 8889
-          targetPort: 8889
-  serviceMonitor:
-    main:
-      selector:
-        matchLabels:
-          app.kubernetes.io/name: eraser-metrics
-          app.kubernetes.io/instance: eraser-metrics
-      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
-      endpoints:
-        - port: metrics
-          interval: 30s
-          scrapeTimeout: 15s
-          path: /metrics
-  persistence:
-    config:
-      enabled: true
-      type: configMap
-      name: eraser-config
-      advancedMounts:
-        main:
-          main:
-            - path: /conf/otel-collector-config.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: otel-collector-config.yaml

clusters/cl01tl/helm/external-dns/Chart.yaml

@@ -8,7 +8,6 @@ keywords:
 home: https://docs.alexlebens.dev/applications/eraser/
 sources:
   - https://github.com/kubernetes-sigs/external-dns
-  - https://explore.ggcr.dev/?repo=registry.k8s.io%2Fexternal-dns%2Fexternal-dns
   - https://github.com/kashalls/external-dns-unifi-webhook
   - https://github.com/kubernetes-sigs/external-dns/tree/master/charts/external-dns
 maintainers:
@@ -20,4 +19,4 @@ dependencies:
     repository: https://kubernetes-sigs.github.io/external-dns/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/external-dns
-appVersion: v0.21.0
+appVersion: v0.20.0

clusters/cl01tl/helm/external-dns/values.yaml

@@ -1,7 +1,4 @@
 external-dns-unifi:
-  image:
-    repository: registry.k8s.io/external-dns/external-dns
-    tag: v0.21.0@sha256:f53faaf71cb270d1ca9dce6ea0c94bfebf1a18696263487f0fbc74b9bf2bd7ff
   fullnameOverride: external-dns-unifi
   resources:
     requests:

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
-appVersion: v1.1.0
+appVersion: v1.0.9

clusters/cl01tl/helm/foldergram/values.yaml

@@ -12,12 +12,13 @@ foldergram:
         main:
           image:
             repository: ghcr.io/foldergram/foldergram
-            tag: 1.1.0@sha256:b08c7f30a15a3d3e4cf0877a5271cb76be6a36ab83751f040c115ccdb76b736a
+            tag: 1.0.9@sha256:aa6707e7456386f2d74b8f2769d0281f4127d1276349583b8531dbaa8f844883
+            pullPolicy: IfNotPresent
           env:
             - name: IMAGE_DETAIL_SOURCE
               value: original
             - name: DERIVATIVE_MODE
-              value: eager
+              value: lazy
             - name: DATA_ROOT
               value: ./data
             - name: GALLERY_ROOT

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f709ef2ce041d934faf75dfa31cc86e536aa62ab31ab82584c9751652561744c
-generated: "2026-04-04T21:02:01.689182-05:00"
+digest: sha256:ebf08159809ef0d69fcb8742b47245c82994b528c2f58e5ed40293555e085ecd
+generated: "2026-03-31T18:37:59.187695-05:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:b2a7ef962a91dff4313f66c1d04356f1b2aeefc752d672a9a27ea227db4b8c7d
-generated: "2026-04-04T21:02:09.187828-05:00"
+digest: sha256:1f530794c6d9c4a487d30443dce7ddf556524c7f875c6e5249b135e81528f0c5
+generated: "2026-03-31T19:06:30.871275-05:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/values.yaml

@@ -113,12 +113,12 @@ gatus:
       - name: yamtrack
         url: https://yamtrack.alexlebens.net
         <<: *defaults
+      - name: movie-roulette
+        url: https://movie-roulette.alexlebens.net
+        <<: *defaults
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
-      - name: kyoo
-        url: https://kyoo.alexlebens.net
-        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -134,6 +134,9 @@ gatus:
       - name: immich
         url: https://immich.alexlebens.net
         <<: *defaults
+      - name: photoview
+        url: https://photoview.alexlebens.net
+        <<: *defaults
       - name: foldergram
         url: https://foldergram.alexlebens.net
         <<: *defaults
@@ -176,18 +179,15 @@ gatus:
       - name: home-assistant-code-server
         url: https://home-assistant-code-server.alexlebens.net
         <<: *defaults
-      - name: postiz-spotlight
-        url: https://postiz-spotlight.alexlebens.net
-        <<: *defaults
-      - name: postiz-temporal
-        url: https://postiz-temporal.alexlebens.net
-        <<: *defaults
       - name: argocd
         url: https://argocd.alexlebens.net
         <<: *defaults
       - name: komodo
         url: https://komodo.alexlebens.net
         <<: *defaults
+      - name: argo-workflows
+        url: https://argo-workflows.alexlebens.net
+        <<: *defaults
       - name: omni-tools
         url: https://omni-tools.alexlebens.net
         <<: *defaults
@@ -359,7 +359,7 @@ gatus:
         <<: *defaults
         group: external
       - name: outline
-        url: https://outline.alexlebens.dev
+        url: https://wiki.alexlebens.dev
         <<: *defaults
         group: external
       - name: vaultwarden
@@ -380,6 +380,10 @@ gatus:
         url: https://gitea.alexlebens.dev
         <<: *defaults
         group: external
+      - name: codeserver
+        url: https://codeserver.alexlebens.dev
+        <<: *defaults
+        group: external
       - name: authentik
         url: https://auth.alexlebens.dev
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.28
-digest: sha256:16e4470b394110a11721fe38a57ad1cfa7c994bca440bfbbc5b3b7a46a79f165
-generated: "2026-04-05T02:12:22.980217268Z"
+  version: 0.20.27
+digest: sha256:b66a7ab013f5eda47ccf94824796e026642e1abfc051e498957ee0f59743e9fc
+generated: "2026-03-31T21:37:08.823163353Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.28
+    version: 0.20.27
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 12.5.0
 - name: actions
   repository: https://dl.gitea.com/charts/
-  version: 0.0.5
+  version: 0.0.4
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.30.0
@@ -13,7 +13,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ae512dab12cc692921a8cf80f8459fa652ae20f393a34c14f25a851410724096
-generated: "2026-04-07T16:50:50.725821375Z"
+digest: sha256:a31820970bf7a7e5fa51ff09668238ab5e3b9d4433a71e35d07b779ff632b94c
+generated: "2026-04-01T21:57:18.743604859Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -14,7 +14,6 @@ sources:
   - https://hub.docker.com/r/gitea/gitea
   - https://hub.docker.com/r/renovate/renovate
   - https://hub.docker.com/r/d3fk/s3cmd/
-  - https://hub.docker.com/_/busybox
   - https://gitea.com/gitea/helm-chart
   - https://gitea.com/gitea/helm-actions
   - https://github.com/meilisearch/meilisearch-kubernetes/tree/main/charts/meilisearch
@@ -31,7 +30,7 @@ dependencies:
   - name: actions
     alias: gitea-actions
     repository: https://dl.gitea.com/charts/
-    version: 0.0.5
+    version: 0.0.4
   - name: meilisearch
     version: 0.30.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
@@ -40,7 +39,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -145,52 +145,11 @@ gitea-actions:
   statefulset:
     replicas: 6
     timezone: America/Chicago
-    resources:
-      limits:
-        ephemeral-storage: 15Gi
-      requests:
-        ephemeral-storage: 2Gi
-    affinity:
-      podAntiAffinity:
-        preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                  - key: app.kubernetes.io/name
-                    operator: In
-                    values:
-                    - gitea-actions-act-runner
-              topologyKey: "kubernetes.io/hostname"
-    extraVolumes:
-      - name: workspace-vol
-        ephemeral:
-          volumeClaimTemplate:
-            spec:
-              accessModes:
-                - ReadWriteOnce
-              storageClassName: ceph-block
-              resources:
-                requests:
-                  storage: 20Gi
-      - name: docker-vol
-        ephemeral:
-          volumeClaimTemplate:
-            spec:
-              accessModes:
-                - ReadWriteOnce
-              storageClassName: ceph-block
-              resources:
-                requests:
-                  storage: 50Gi
     actRunner:
       registry: docker.io
       repository: gitea/act_runner
       # renovate: datasource=docker depName=gitea/act_runner
       tag: 0.3.1@sha256:c2a169c5e99864c25e32527cef3d82203225e09558773022bf3dc164a2e6d762
-      extraVolumeMounts:
-        - name: workspace-vol
-          mountPath: /workspace
       config: |
         log:
           level: debug
@@ -206,10 +165,7 @@ gitea-actions:
       registry: docker.io
       repository: docker
       # renovate: datasource=docker depName=docker
-      tag: 29.4.0-dind@sha256:f80c26212befc1c1988b529495532c6b9180d9b1dab1611f4a1efbe9da8ec821
-      extraVolumeMounts:
-        - name: docker-vol
-          mountPath: /var/lib/docker
+      tag: 29.3.1-dind@sha256:4d90f1f6c400315c2dba96d3ec93c01e64198395cbba04f79d12adce4f737029
     persistence:
       storageClass: ceph-block
       size: 10Gi
@@ -245,6 +201,7 @@ postgres-18-cluster:
     resources:
       requests:
         cpu: 100m
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:6c096d1ce729469f12e66b2d0d0c677990d06643ff49401ee8fa69f5ed738e9c
-generated: "2026-04-04T21:02:18.686653-05:00"
+digest: sha256:1f6bf4f0f24f85d8c362766010e4f42d26458c0412b67afab9b05f2e17eacced
+generated: "2026-03-31T19:12:08.326471-05:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -396,44 +396,6 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json
 
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-version-checker-internal
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
-
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-version-checker
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-version-checker
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.3
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:2ef60d6315a21e0d92970570630cc74720643e7e51e0574107249684ddc2fab5
-generated: "2026-04-07T20:36:47.509644-05:00"
+digest: sha256:fb17e2bad9c3a303da2b9d65ee5bd082a58ca6a5cee17d337e2536747982aa2c
+generated: "2026-03-31T18:38:15.510833-05:00"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.4.1
+appVersion: 2026.4.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.4.1@sha256:8848691147f01a6eee7753de2ade21b04d6168fcd2e2a7089f6f84e3b7b86960
+            tag: 2026.4.0@sha256:7fbf6a5e006e889d7799476ad7646bd18e9dc73e8a4ccd9326b41798de6bb3bf
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.115.0-ls331@sha256:308f49acac8734542560f797d79b15e4c872c4d3f97d1b22862633fcce2af62a
+            tag: 4.112.0-ls325@sha256:a17ee95f4e1b43284fe5dfea99e82c8a26f096534215ff36817fa80161eec220
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/homepage/values.yaml

@@ -145,18 +145,18 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movie Roulette:
+                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
+                  description: Movie Roulette
+                  href: https://movie-roulette.alexlebens.net
+                  siteMonitor: http://movie-roulette.movie-roulette:80
+                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin
                   href: https://jellyfin.alexlebens.net
                   siteMonitor: http://jellyfin.jellyfin:80
                   statusStyle: dot
-              - Movies and TV:
-                  icon: sh-kyoo.webp
-                  description: Kyoo
-                  href: https://kyoo.alexlebens.net
-                  siteMonitor: http://front.kyoo:8901
-                  statusStyle: dot
               - Youtube Archive:
                   icon: sh-tube-archivist-light.webp
                   description: TubeArchivist
@@ -181,6 +181,12 @@ homepage:
                   href: https://immich.alexlebens.net
                   siteMonitor: http://immich.immich:2283
                   statusStyle: dot
+              - Pictures:
+                  icon: sh-photoview.webp
+                  description: Photoview
+                  href: https://photoview.alexlebens.net
+                  siteMonitor: http://photoview.photoview:80
+                  statusStyle: dot
               - Pictures:
                   icon: sh-foldergram.webp
                   description: Foldergram
@@ -202,7 +208,7 @@ homepage:
                   statusStyle: dot
               - Documentation:
                   icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Homelab Docs
+                  description: Documentation Wiki
                   href: https://docs.alexlebens.dev
                   siteMonitor: https://docs.alexlebens.dev
                   statusStyle: dot
@@ -230,11 +236,11 @@ homepage:
                   href: https://chat.alexlebens.dev
                   siteMonitor: https://chat.alexlebens.dev
                   statusStyle: dot
-              - Knowledge Base:
+              - Wiki:
                   icon: sh-outline.webp
                   description: Outline
-                  href: https://outline.alexlebens.dev
-                  siteMonitor: https://outline.alexlebens.dev
+                  href: https://wiki.alexlebens.dev
+                  siteMonitor: https://wiki.alexlebens.dev
                   statusStyle: dot
               - Passwords:
                   icon: sh-vaultwarden-light.webp
@@ -303,7 +309,7 @@ homepage:
                   href: https://paperless-ngx.alexlebens.net
                   siteMonitor: http://paperless-ngx.paperless-ngx:80
                   statusStyle: dot
-              - Wikipedia:
+              - Wiki:
                   icon: sh-kiwix-light.webp
                   description: Kiwix
                   href: https://kiwix.alexlebens.net
@@ -344,24 +350,18 @@ homepage:
                   href: https://gitea-ps10rp.boreal-beaufort.ts.net
                   siteMonitor: https://gitea-ps10rp.boreal-beaufort.ts.net
                   statusStyle: dot
+              - IDE (External):
+                  icon: sh-visual-studio-code.webp
+                  description: VS Code
+                  href: https://codeserver.alexlebens.dev
+                  siteMonitor: https://codeserver.alexlebens.dev
+                  statusStyle: dot
               - IDE (Home Assistant):
                   icon: sh-visual-studio-code.webp
                   description: Edit config for Home Assistant
                   href: https://home-assistant-code-server.alexlebens.net
                   siteMonitor: http://home-assistant-code-server.home-assistant:8443
                   statusStyle: dot
-              - Spotlight (Postiz):
-                  icon: https://raw.githubusercontent.com/getsentry/spotlight/c528fc752edde40f008282dc7c8ff1568e58c40b/packages/website/public/favicon.svg
-                  description: Sentry monitoring for Postiz
-                  href: https://postiz-spotlight.alexlebens.net
-                  siteMonitor: http://postiz-spotlight.postiz:8969
-                  statusStyle: dot
-              - Temporal (Postiz):
-                  icon: https://raw.githubusercontent.com/temporalio/documentation/47b489b69d7c7ee4c3a0880cc0faf11b5f4cdb2a/static/img/favicon.svg
-                  description: Temporal monitoring for Postiz
-                  href: https://postiz-temporal.alexlebens.net
-                  siteMonitor: http://postiz-temporal-web.postiz:8080
-                  statusStyle: dot
           - Automation:
               - Continuous Deployment:
                   icon: sh-argo-cd.webp
@@ -393,6 +393,12 @@ homepage:
                       secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
                       showStacks: true
                       fields: ["running", "down", "unhealthy", "unknown"]
+              - Deployment Workflows:
+                  icon: sh-argo-cd.webp
+                  description: Argo Workflows
+                  href: https://argo-workflows.alexlebens.net
+                  siteMonitor: http://argo-workflows-server.argo-workflows:2746
+                  statusStyle: dot
               - Uptime:
                   icon: sh-gatus.webp
                   description: Gatus
@@ -855,7 +861,7 @@ homepage:
                   siteMonitor: http://yubal.yubal:80
                   statusStyle: dot
               - Music Grabber:
-                  icon: sh-music-grabber.webp
+                  icon: sh-music-service.webp
                   description: Replicate Music playlists
                   href: https://music-grabber.alexlebens.net
                   siteMonitor: http://music-grabber.music-grabber:80

clusters/cl01tl/helm/houndarr/Chart.yaml

@@ -4,7 +4,6 @@ version: 1.0.0
 description: Houndarr
 keywords:
   - houndarr
-  - rescan
   - servarr
 home: https://docs.alexlebens.dev/applications/houndarr/
 sources:
@@ -25,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr
-appVersion: v1.7.0
+appVersion: v1.6.5

clusters/cl01tl/helm/houndarr/values.yaml

@@ -8,7 +8,7 @@ houndarr:
         main:
           image:
             repository: ghcr.io/av1155/houndarr
-            tag: v1.7.0@sha256:8ae2a8b86497cbc54d11591c12220f3be3319039c2bdd0c8b041b2b7c2fd7943
+            tag: v1.6.5@sha256:f3adbd745094919166bafcd9b428738d1087f651b1562adeaba44ff975827d87
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:8b9129d1bbef82d6e0033610da9c25b2b98ce078027d389429cd947c8d22823e
-generated: "2026-04-04T21:02:46.154937-05:00"
+digest: sha256:b52be61811b2c4b8f1ac733be19de51e33540589b71337af99fc97727a1894e8
+generated: "2026-04-01T19:49:30.408077-05:00"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.7.2
+appVersion: v2.6.3

clusters/cl01tl/helm/immich/values.yaml

@@ -8,7 +8,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.7.2@sha256:6a2952539e2a9c8adcf6fb74850bb1ba7e1db2804050acea21baafdc9154c430
+            tag: v2.6.3@sha256:0cc1f82953d9598eb9e9dd11cbde1f50fe54f9c46c4506b089e8ad7bfc9d1f0c
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
-appVersion: 10.11.8
+appVersion: 10.11.7

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -5,9 +5,6 @@ jellyfin:
       replicas: 1
       strategy: Recreate
       pod:
-        securityContext:
-          fsGroup: 1000
-          fsGroupChangePolicy: OnRootMismatch
         affinity:
           podAntiAffinity:
             requiredDuringSchedulingIgnoredDuringExecution:
@@ -22,7 +19,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.8@sha256:93227545077893cc9516f28b3adb733b67bc4691f41b6167428a2a0e3220b81c
+            tag: 10.11.7@sha256:2b93aa3830dcd0aab7185c635e20edef1f8dc5d2e999768baf1724e88c078004
           env:
             - name: TZ
               value: America/Chicago
@@ -40,7 +37,7 @@ jellyfin:
         exporter:
           image:
             repository: rebelcore/jellyfin-exporter
-            tag: v1.5.0@sha256:37e6d389654180ad9e1661210a48fee71a6dc355a160670235a00329da0dbf80
+            tag: v1.4.0@sha256:dd35d901df663141025670b4b44a62a178b331e9fa084b17016f6fba46343ce9
           args:
             - '--jellyfin.address=http://127.0.0.1:8096'
             - '--jellyfin.token=$(TOKEN)'

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:4ff8555c97c457923957fac499a0c9469edac8b3dd7ab0fab46f7d4e07e8eff5
-generated: "2026-04-04T21:02:58.694365-05:00"
+digest: sha256:a5b2ddd5097971d246b0d1f519ffafb662594d9f84ddc854b8eedf8702d2035f
+generated: "2026-04-01T19:49:45.674314-05:00"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat
-appVersion: 1.1.9
+appVersion: 1.1.7

clusters/cl01tl/helm/jellystat/values.yaml

@@ -8,7 +8,7 @@ jellystat:
         main:
           image:
             repository: ghcr.io/cyfershepard/jellystat
-            tag: 1.1.9@sha256:f7f56aabad139faa996b8bb21a36dd3e65f7c87e10408921815b95a28a4efbaf
+            tag: 1.1.8@sha256:c8c451704ba7985340142cd047e2364cabaf41b613669b6c5340688ed217f82a
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -32,6 +32,6 @@ dependencies:
     alias: volsync-target-data
     version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -5,7 +5,7 @@ description: Kiwix
 keywords:
   - kiwix
   - wikipedia
-home: https://docs.alexlebens.dev/applications/kiwix/
+home: https://wiki.alexlebens.dev/s/16eaaf92-3607-421f-bc66-cb3c39eeaea0
 sources:
   - https://github.com/kiwix
   - https://github.com/kiwix/kiwix-tools/pkgs/container/kiwix-serve

clusters/cl01tl/helm/kiwix/values.yaml

@@ -4,11 +4,13 @@ kiwix:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: ghcr.io/kiwix/kiwix-serve
-            tag: 3.8.2@sha256:acdab28186a66b51bfd4202210c6732931ea95cf41c711148a0c9770b9fcc9e1
+            tag: 3.8.2
+            pullPolicy: IfNotPresent
           args:
             - '*.zim'
           env:
@@ -16,8 +18,8 @@ kiwix:
               value: 8080
           resources:
             requests:
-              cpu: 1m
-              memory: 10Mi
+              cpu: 50m
+              memory: 512Mi
   service:
     main:
       controller: main
@@ -25,6 +27,7 @@ kiwix:
         http:
           port: 80
           targetPort: 8080
+          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -37,8 +40,11 @@ kiwix:
         - kiwix.alexlebens.net
       rules:
         - backendRefs:
-            - name: kiwix
+            - group: ''
+              kind: Service
+              name: kiwix
               port: 80
+              weight: 100
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ed3362c98ab60b195a47d0789f2420e041e907be955cdd122f84e363a00f4c73
-generated: "2026-04-04T21:03:12.459168-05:00"
+digest: sha256:c1bbed66c94b64ba44ef1caadf74d46d9bce551e37b62b1cd0a3af9b81046251
+generated: "2026-03-24T14:00:56.813765-05:00"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -4,16 +4,16 @@ version: 1.0.0
 description: Komodo
 keywords:
   - komodo
-  - docker-deployment
-home: https://docs.alexlebens.dev/applications/komodo/
+  - deployment
+  - dashboard
+  - docker-compose
+home: https://wiki.alexlebens.dev/s/bb7eb683-b5c7-4f50-9f2c-e8e57dc67c81
 sources:
   - https://github.com/moghtech/komodo
-  - https://github.com/FerretDB/FerretDB
+  - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/moghtech/komodo/pkgs/container/komodo-core
-  - https://github.com/ferretdb/FerretDB/pkgs/container/ferretdb
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-keys
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.1.1
+appVersion: v2.1.0

clusters/cl01tl/helm/komodo/templates/external-secret.yaml

@@ -14,23 +14,38 @@ spec:
   data:
     - secretKey: passkey
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/komodo/config
+        metadataPolicy: None
         property: passkey
     - secretKey: jwt
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/komodo/config
+        metadataPolicy: None
         property: jwt
     - secretKey: webhook
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/komodo/config
+        metadataPolicy: None
         property: webhook
     - secretKey: oidc-client-id
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /authentik/oidc/komodo
+        metadataPolicy: None
         property: client
     - secretKey: oidc-client-secret
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /authentik/oidc/komodo
+        metadataPolicy: None
         property: secret
 
 ---
@@ -50,9 +65,15 @@ spec:
   data:
     - secretKey: uri
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/komodo/ferret
+        metadataPolicy: None
         property: uri
     - secretKey: password
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/komodo/ferret
+        metadataPolicy: None
         property: password

clusters/cl01tl/helm/komodo/values.yaml

@@ -4,11 +4,13 @@ komodo:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: ghcr.io/moghtech/komodo-core
-            tag: 2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba
+            tag: 2.1.0@sha256:4915d91b5c6e9de4e8fd59391eed5cad090ec84dcf6a1a9233d97edfdbbb88e7
+            pullPolicy: IfNotPresent
           env:
             - name: COMPOSE_LOGGING_DRIVER
               value: local
@@ -43,7 +45,7 @@ komodo:
             - name: KOMODO_LOCAL_AUTH
               value: true
             - name: KOMODO_ENABLE_NEW_USERS
-              value: false
+              value: true
             - name: KOMODO_DISABLE_NON_ADMIN_CREATE
               value: true
             - name: KOMODO_TRANSPARENT_MODE
@@ -80,16 +82,18 @@ komodo:
           resources:
             requests:
               cpu: 10m
-              memory: 80Mi
+              memory: 128Mi
     ferretdb-2:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: ghcr.io/ferretdb/ferretdb
-            tag: 2.7.0@sha256:5706414241eb84f0515512c37b46db0f1b1eac9e5ceb7e4c2523211c184b1985
+            tag: 2.7.0
+            pullPolicy: IfNotPresent
           env:
             - name: DB_USERNAME
               value: ferret
@@ -102,8 +106,8 @@ komodo:
               value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
           resources:
             requests:
-              cpu: 1m
-              memory: 20Mi
+              cpu: 10m
+              memory: 128Mi
   service:
     main:
       controller: main
@@ -111,12 +115,14 @@ komodo:
         http:
           port: 80
           targetPort: 9120
+          protocol: HTTP
     ferretdb-2:
       controller: ferretdb-2
       ports:
         http:
           port: 27017
           targetPort: 27017
+          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -129,8 +135,11 @@ komodo:
         - komodo.alexlebens.net
       rules:
         - backendRefs:
-            - name: komodo-main
+            - group: ''
+              kind: Service
+              name: komodo-main
               port: 80
+              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -141,6 +150,7 @@ komodo:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 1Gi
+      retain: true
       advancedMounts:
         main:
           main:
@@ -150,6 +160,7 @@ komodo:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 5Gi
+      retain: true
       advancedMounts:
         main:
           main:
@@ -159,6 +170,7 @@ komodo:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 5Gi
+      retain: true
       advancedMounts:
         main:
           main:
@@ -170,7 +182,7 @@ postgresql-17-fdb-cluster:
   cluster:
     image:
       repository: ghcr.io/ferretdb/postgres-documentdb
-      tag: 17-0.107.0-ferretdb-2.7.0@sha256:2386795ec2aa7ae559304361979f1dc5708d383ee9020ae63dadc2940dfe58f7
+      tag: "17-0.106.0-ferretdb-2.5.0"
     postgresUID: 999
     postgresGID: 999
     postgresql:
@@ -212,12 +224,35 @@ postgresql-17-fdb-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
+      # - name: garage-remote
+      #   index: 1
+      #   destinationBucket: postgres-backups
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   retentionPolicy: "90d"
+      #   data:
+      #     compression: bzip2
+      # - name: external
+      #   index: 1
+      #   endpointURL: https://nyc3.digitaloceanspaces.com
+      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 50 14 * * *"
         backupName: garage-local
+      # - name: weekly-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 4 * * SAT"
+      #   backupName: garage-remote
+      # - name: daily-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 0 * * *"
+      #   backupName: external
 volsync-target-keys:
   pvcTarget: komodo-keys
   local:

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,15 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 83.2.0
-- name: prometheus-operator-crds
-  repository: oci://ghcr.io/prometheus-community/charts
-  version: 28.0.1
+  version: 82.16.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:d0942cff6346335abc91f9ceb919c5a819543b9b8baed11f83de89486f4e874d
-generated: "2026-04-08T19:03:59.676069331Z"
+  version: 0.4.0
+digest: sha256:ece31be37d2fa7c7c59058e2d47e8190bea3baa742b4f04fe793956cd2d52f7f
+generated: "2026-04-02T07:03:55.367235416Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -5,25 +5,22 @@ description: Kube Prometheus Stack
 keywords:
   - kube-prometheus-stack
   - prometheus
+  - alertmanager
   - metrics
-home: https://docs.alexlebens.dev/applications/kube-prometheus-stack/
+  - alerts
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/cd9fc3a4-aa88-4285-8886-91a6c5aecf7d
 sources:
   - https://github.com/prometheus/prometheus
   - https://github.com/prometheus-operator/kube-prometheus
-  - https://git.xenrox.net/~xenrox/ntfy-alertmanager/
-  - https://hub.docker.com/r/xenrox/ntfy-alertmanager
+  - https://github.com/alexbakker/alertmanager-ntfy
   - https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack
-  - https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-operator-crds
   - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 83.2.0
-    repository: oci://ghcr.io/prometheus-community/charts
-  - name: prometheus-operator-crds
-    version: 28.0.1
+    version: 82.16.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
@@ -31,7 +28,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kube-prometheus-stack/templates/external-secret.yaml

@@ -14,7 +14,10 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
+        metadataPolicy: None
         property: ntfy_password
 
 ---
@@ -34,7 +37,10 @@ spec:
   data:
     - secretKey: token
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /garage/token
+        metadataPolicy: None
         property: metric
 
 ---
@@ -54,9 +60,15 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
+        metadataPolicy: None
         property: ntfy_password
     - secretKey: config
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/kube-prometheus-stack/ntfy-alertmanager
+        metadataPolicy: None
         property: config

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -9,8 +9,10 @@ kube-prometheus-stack:
       kubeSchedulerRecording: false
   global:
     rbac:
+      create: true
       createAggregateClusterRoles: true
   alertmanager:
+    enabled: true
     config:
       route:
         group_by: ["namespace", "alertname"]
@@ -34,6 +36,8 @@ kube-prometheus-stack:
     route:
       main:
         enabled: true
+        apiVersion: gateway.networking.k8s.io/v1
+        kind: HTTPRoute
         hostnames:
           - alertmanager.alexlebens.net
         parentRefs:
@@ -41,9 +45,14 @@ kube-prometheus-stack:
             kind: Gateway
             name: traefik-gateway
             namespace: traefik
+        matches:
+          - path:
+              type: PathPrefix
+              value: /
     alertmanagerSpec:
       secrets:
         - alertmanager-config-secret
+      replicas: 1
   grafana:
     enabled: false
   kubeApiServer:
@@ -52,13 +61,11 @@ kube-prometheus-stack:
   kubeControllerManager:
     enabled: false
   kubeEtcd:
+    enabled: true
     service:
       selector:
         k8s-app: kube-controller-manager
     serviceMonitor:
-      metricRelabelings:
-        - action: labeldrop
-          regex: pod
       relabelings:
         - sourceLabels: [__meta_kubernetes_pod_node_name]
           separator: ;
@@ -66,12 +73,22 @@ kube-prometheus-stack:
           targetLabel: nodename
           replacement: $1
           action: replace
+      metricRelabelings:
+        - action: labeldrop
+          regex: pod
   kubeScheduler:
     enabled: false
   kubeProxy:
     enabled: false
+  kubeStateMetrics:
+    enabled: true
+  nodeExporter:
+    operatingSystems:
+      darwin:
+        enabled: false
   prometheusOperator:
     admissionWebhooks:
+      enabled: true
       annotations:
         argocd.argoproj.io/hook: PreSync
         argocd.argoproj.io/hook-delete-policy: HookSucceeded
@@ -89,6 +106,8 @@ kube-prometheus-stack:
     route:
       main:
         enabled: true
+        apiVersion: gateway.networking.k8s.io/v1
+        kind: HTTPRoute
         hostnames:
           - prometheus.alexlebens.net
         parentRefs:
@@ -96,10 +115,13 @@ kube-prometheus-stack:
             kind: Gateway
             name: traefik-gateway
             namespace: traefik
+        matches:
+          - path:
+              type: PathPrefix
+              value: /
     prometheusSpec:
       scrapeInterval: 30s
-      retention: 45d
-      retentionSize: 240GiB
+      retention: 30d
       externalUrl: https://prometheus.alexlebens.net
       ruleSelectorNilUsesHelmValues: false
       serviceMonitorSelectorNilUsesHelmValues: false
@@ -120,11 +142,14 @@ ntfy-alertmanager:
     main:
       type: deployment
       replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: xenrox/ntfy-alertmanager
-            tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
+            tag: 1.0.0
+            pullPolicy: IfNotPresent
   service:
     main:
       controller: main
@@ -132,6 +157,7 @@ ntfy-alertmanager:
         http:
           port: 80
           targetPort: 8080
+          protocol: HTTP
   persistence:
     config:
       enabled: true

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -4,8 +4,9 @@ version: 1.0.0
 description: Kubelet Serving Cert Approver
 keywords:
   - kubelet-serving-cert-approver
+  - kubernetes
   - certificate
-home: https://docs.alexlebens.dev/applications/kubelet-serving-cert-approver/
+home: https://wiki.alexlebens.dev/s/3aa80722-db85-41b4-ba1e-8d4c3d8643b5
 sources:
   - https://github.com/alex1989hu/kubelet-serving-cert-approver
   - https://github.com/alex1989hu/kubelet-serving-cert-approver/pkgs/container/kubelet-serving-cert-approver

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -29,6 +29,7 @@ kubelet-serving-cert-approver:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       serviceAccount:
         name: kubelet-serving-cert-approver
       pod:
@@ -37,7 +38,8 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d
+            tag: 0.10.3
+            pullPolicy: Always
           args:
             - serve
           env:
@@ -47,8 +49,8 @@ kubelet-serving-cert-approver:
                   fieldPath: metadata.namespace
           resources:
             requests:
-              cpu: 1m
-              memory: 20Mi
+              cpu: 100m
+              memory: 128Mi
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:
@@ -68,6 +70,8 @@ kubelet-serving-cert-approver:
         health:
           port: 8080
           targetPort: 8080
+          protocol: HTTP
         metrics:
           port: 9090
           targetPort: 9090
+          protocol: HTTP

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -4,9 +4,10 @@ version: 1.0.0
 description: Kubernetes Cloudflare DDNS
 keywords:
   - kubernetes-cloudflare-ddns
+  - cloudflare
   - ddns
-  - job
-home: https://docs.alexlebens.dev/applications/kubelet-serving-cert-approver/
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/49513b51-cf91-4efd-b2a5-957555bc3ad7
 sources:
   - https://github.com/kubitodev/kubernetes-cloudflare-ddns
   - https://hub.docker.com/r/kubitodev/kubernetes-cloudflare-ddns

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/templates/external-secret.yaml

@@ -14,17 +14,29 @@ spec:
   data:
     - secretKey: AUTH_KEY
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
+        metadataPolicy: None
         property: token
     - secretKey: NAME
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
+        metadataPolicy: None
         property: name
     - secretKey: RECORD_ID
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
+        metadataPolicy: None
         property: record-id
     - secretKey: ZONE_ID
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cloudflare/alexlebens.net/ddns
+        metadataPolicy: None
         property: zone-id

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/values.yaml

@@ -4,19 +4,24 @@ kubernetes-cloudflare-ddns:
       type: cronjob
       cronjob:
         suspend: false
-        timeZone: America/Chicago
+        concurrencyPolicy: Forbid
+        timeZone: US/Central
         schedule: "30 4 * * *"
+        startingDeadlineSeconds: 90
+        successfulJobsHistory: 1
+        failedJobsHistory: 1
         backoffLimit: 3
         parallelism: 1
       containers:
         main:
           image:
             repository: kubitodev/kubernetes-cloudflare-ddns
-            tag: 2.0.0@sha256:80979b046e32ecccedfa6c00804676d070ef87c7f77a65e4afa4e91ffdeb7309
+            tag: 2.0.0
+            pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
                 name: kubernetes-cloudflare-ddns-secret
           resources:
             requests:
               cpu: 10m
-              memory: 32Mi
+              memory: 128Mi

clusters/cl01tl/helm/kyoo/Chart.lock

@@ -1,12 +0,0 @@
-dependencies:
-- name: kyoo
-  repository: oci://ghcr.io/zoriya/helm-charts
-  version: 5.0.0
-- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:0a5ba08e137471d788da07502db63f5be535c2843f5bfda74fb873a997846ded
-generated: "2026-04-08T21:04:05.245024-05:00"

clusters/cl01tl/helm/kyoo/Chart.yaml

@@ -1,35 +0,0 @@
-apiVersion: v2
-name: kyoo
-version: 1.0.0
-description: Kyoo
-keywords:
-  - kyoo
-  - media
-home: https://docs.alexlebens.dev/applications/kyoo/
-sources:
-  - https://github.com/zoriya/Kyoo
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_api
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_auth
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_front
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_scanner
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_transcoder
-  - https://github.com/zoriya/Kyoo/tree/master/chart
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: kyoo
-    repository: oci://ghcr.io/zoriya/helm-charts
-    version: 5.0.0
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.11.2
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-metadata
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kyoo.png
-# renovate: datasource=github-releases depName=zoriya/Kyoo
-appVersion: v5.0.0

clusters/cl01tl/helm/kyoo/templates/external-secret.yaml

@@ -1,54 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: kyoo-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: rsa-private
-      remoteRef:
-        key: /cl01tl/kyoo/key
-        property: rsa-private
-    - secretKey: scanner-apikey
-      remoteRef:
-        key: /cl01tl/kyoo/key
-        property: scanner
-    - secretKey: tmdb-apikey
-      remoteRef:
-        key: /tmdb/alexlebens
-        property: api-key
-    - secretKey: tvdb-apikey
-      remoteRef:
-        key: /tvdb/alexlebens
-        property: api-key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: kyoo-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: client
-      remoteRef:
-        key: /authentik/oidc/kyoo
-        property: client
-    - secretKey: secret
-      remoteRef:
-        key: /authentik/oidc/kyoo
-        property: secret

clusters/cl01tl/helm/kyoo/templates/http-route.yaml

@@ -1,88 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: kyoo
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - kyoo.alexlebens.net
-  rules:
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-front
-          port: 8901
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /video
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-transcoder
-          port: 7666
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /auth/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-auth
-          port: 4568
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /.well-known/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-auth
-          port: 4568
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /api/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-api
-          port: 3567
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /swagger
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-api
-          port: 3567
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /scanner/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-scanner
-          port: 4389
-          weight: 100

clusters/cl01tl/helm/kyoo/templates/persistent-volume-claim.yaml

@@ -1,131 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-anime-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-anime-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-anime-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-anime-movies-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-movies-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-movies-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-movies-4k-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-standup-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-standup-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-standup-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-tvshows-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-tvshows-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-tvshows-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-tvshows-4k-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/kyoo/templates/persistent-volume.yaml

@@ -1,173 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-anime-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Anime
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-anime-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Anime Movies
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Movies
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-movies-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Movies 4K
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-standup-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-standup-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Stand Up
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-tvshows-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/TV Shows
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-tvshows-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/TV Shows
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/kyoo/values.yaml

@@ -1,223 +0,0 @@
-kyoo:
-  global:
-    securityContext:
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-    postgres:
-      shared:
-        host: kyoo-postgresql-18-cluster-rw
-        port: 5432
-        existingSecret: kyoo-postgresql-18-cluster-app
-        userKey: user
-        passwordKey: password
-      kyoo_api:
-        database: kyoo_api
-        sslmode: disable
-        kyoo_api:
-          userKey: user
-          passwordKey: password
-          existingSecret: kyoo-postgresql-18-cluster-superuser
-      kyoo_auth:
-        database: kyoo_auth
-        sslmode: disable
-      kyoo_scanner:
-        database: kyoo_scanner
-        sslmode: disable
-      kyoo_transcoder:
-        database: kyoo_transcoder
-        sslmode: disable
-  kyoo:
-    address: https://kyoo.alexlebens.net
-    auth:
-      privatekey:
-        existingSecret: kyoo-key-secret
-        privatekeyKey: rsa-private
-      apikeys:
-        scanner:
-          existingSecret: kyoo-key-secret
-          apikeyKey: scanner-apikey
-    transcoderAcceleration: qsv
-    transcoderPreset: fast
-    oidc_providers:
-      - name: Authentik
-        existingSecret: kyoo-oidc-secret
-        clientIdKey: client
-        clientSecretKey: secret
-        logo: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/authentik.webp
-        authorizationAddress: https://authentik.alexlebens.net/application/o/authorize/
-        tokenAddress: https://authentik.alexlebens.net/application/o/token/
-        profileAddress: https://authentik.alexlebens.net/application/o/userinfo/
-        scope: "email openid profile"
-        authMethod: ClientSecretBasic
-  media:
-    volumes:
-      - name: kyoo-media-anime-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-anime-nfs-storage
-      - name: kyoo-media-anime-movies-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-anime-movies-nfs-storage
-      - name: kyoo-media-movies-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-movies-nfs-storage
-      - name: kyoo-media-movies-4k-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-movies-4k-nfs-storage
-      - name: kyoo-media-standup-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-standup-nfs-storage
-      - name: kyoo-media-tvshows-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-tvshows-nfs-storage
-      - name: kyoo-media-tvshows-4k-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-tvshows-4k-nfs-storage
-    volumeMounts:
-      - mountPath: /media/anime
-        name: kyoo-media-anime-nfs-storage
-        readOnly: true
-      - mountPath: /media/anime-movies
-        name: kyoo-media-anime-movies-nfs-storage
-        readOnly: true
-      - mountPath: /media/movies
-        name: kyoo-media-movies-nfs-storage
-        readOnly: true
-      - mountPath: /media/movies-4k
-        name: kyoo-media-movies-4k-nfs-storage
-        readOnly: true
-      - mountPath: /media/standup
-        name: kyoo-media-standup-nfs-storage
-        readOnly: true
-      - mountPath: /media/tvshows
-        name: kyoo-media-tvshows-nfs-storage
-        readOnly: true
-      - mountPath: /media/tvshows-4k
-        name: kyoo-media-tvshows-4k-nfs-storage
-        readOnly: true
-    baseMountPath: /media
-  contentdatabase:
-    tmdb:
-      apikeyKey: tmdb-apikey
-      existingSecret: kyoo-key-secret
-    tvdb:
-      apikeyKey: tvdb-apikey
-      pinKey: tvdb-apikey
-      existingSecret: kyoo-key-secret
-  api:
-    kyoo_api:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_api
-        tag: 5.0.0@sha256:dc0210f235e23ae616b0f5952af7867dcbc52e0354c2683ec3c4190fdcd17744
-    persistence:
-      enabled: true
-      size: 1Gi
-      storageClass: ceph-block
-      accessModes:
-        - ReadWriteOnce
-  auth:
-    kyoo_auth:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_auth
-        tag: 5.0.0
-    persistence:
-      enabled: true
-      size: 500Mi
-      storageClass: ceph-block
-      accessModes:
-        - ReadWriteOnce
-  front:
-    kyoo_front:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_front
-        tag: 5.0.0@sha256:985f892470b304f13ef1950fb5f7e9ef33ee39b71705c627cb045773e6dfb7b4
-  scanner:
-    kyoo_scanner:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_scanner
-        tag: 5.0.0@sha256:fa972f3f1e534264f4de153e30fe9481839754a3e724cc2663524a2b30e82b46
-  transcoder:
-    kyoo_transcoder:
-      resources:
-        limits:
-          gpu.intel.com/i915: 1
-        requests:
-          gpu.intel.com/i915: 1
-          cpu: 1
-          memory: 1Gi
-      image:
-        repository: ghcr.io/zoriya/kyoo_transcoder
-        tag: 5.0.0@sha256:59974794f8a638175408fa20f023ba9598108b54ad8ed9a22ec87a1a211dfc43
-    replicaCount: 1
-    persistence:
-      enabled: true
-      size: 1Gi
-      storageClass: ceph-block
-      accessModes:
-        - ReadWriteOnce
-  ingress:
-    enabled: false
-  traefikproxy:
-    enabled: false
-  postgres:
-    enabled: false
-postgres-18-cluster:
-  mode: recovery
-  cluster:
-    enableSuperuserAccess: true
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 5 14 * * *"
-        backupName: garage-local
-  databases:
-    - name: kyoo_api
-      ensure: present
-      owner: app
-    - name: kyoo_auth
-      ensure: present
-      owner: app
-    - name: kyoo_scanner
-      ensure: present
-      owner: app
-    - name: kyoo_transcoder
-      ensure: present
-      owner: app
-volsync-target-metadata:
-  pvcTarget: kyoo-apimetadata
-  local:
-    enabled: true
-    schedule: 26 8 * * *
-  remote:
-    enabled: true
-    schedule: 26 9 * * *
-  external:
-    enabled: true
-    schedule: 26 10 * * *

clusters/cl01tl/helm/languagetool/Chart.yaml

@@ -5,13 +5,12 @@ description: LanguageTool
 keywords:
   - languagetool
   - spellchecking
-home: https://docs.alexlebens.dev/applications/languagetool/
+home: https://wiki.alexlebens.dev/
 sources:
   - https://github.com/languagetool-org/languagetool
   - https://github.com/Erikvl87/docker-languagetool
   - https://hub.docker.com/r/erikvl87/languagetool
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -23,6 +22,6 @@ dependencies:
     alias: volsync-target-data
     version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/languagetool.png
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/languagetool.webp
 # renovate: datasource=github-releases depName=Erikvl87/docker-languagetool
 appVersion: "6.7"

clusters/cl01tl/helm/languagetool/values.yaml

@@ -4,11 +4,13 @@ languagetool:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: erikvl87/languagetool
-            tag: 6.7@sha256:454acc9b3d232bdf37a0eddb1c8d0e93513ce41b914a8a374e3c44a884122364
+            tag: 6.7
+            pullPolicy: IfNotPresent
           env:
             - name: langtool_languageModel
               value: /ngrams
@@ -18,8 +20,8 @@ languagetool:
               value: 1g
           resources:
             requests:
-              cpu: 1m
-              memory: 800Mi
+              cpu: 10m
+              memory: 128Mi
   service:
     main:
       controller: main
@@ -27,6 +29,7 @@ languagetool:
         http:
           port: 80
           targetPort: 8010
+          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -39,8 +42,11 @@ languagetool:
         - languagetool.alexlebens.net
       rules:
         - backendRefs:
-            - name: languagetool
+            - group: ''
+              kind: Service
+              name: languagetool
               port: 80
+              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -51,6 +57,7 @@ languagetool:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 1Gi
+      retain: true
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/libation/Chart.yaml

@@ -4,15 +4,13 @@ version: 1.0.0
 description: Libation
 keywords:
   - libation
+  - audiobooks
   - audible
-  - job
-home: https://docs.alexlebens.dev/applications/languagetool/
+home: https://wiki.alexlebens.dev/s/63beac50-a63f-45fe-b8e5-e1691dd5e9b0
 sources:
   - https://github.com/rmcrackan/Libation
   - https://hub.docker.com/r/rmcrackan/libation
-  - https://hub.docker.com/_/ubuntu/tags
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -26,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.3.3
+appVersion: 13.3.2

clusters/cl01tl/helm/libation/values.yaml

@@ -4,15 +4,20 @@ libation:
       type: cronjob
       cronjob:
         suspend: false
-        timeZone: America/Chicago
+        concurrencyPolicy: Forbid
+        timeZone: US/Central
         schedule: 0 0 1 1 *
+        startingDeadlineSeconds: 90
+        successfulJobsHistory: 1
+        failedJobsHistory: 1
         backoffLimit: 3
         parallelism: 1
       containers:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.3.3@sha256:fbeb84916c81b654412801367b7e96796ffdba83d987a1ed5fed9896cf7cabee
+            tag: 13.3.2
+            pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME
               value: "-1"
@@ -21,7 +26,7 @@ libation:
           resources:
             requests:
               cpu: 10m
-              memory: 32Mi
+              memory: 128Mi
     debug:
       type: deployment
       replicas: 0
@@ -30,7 +35,8 @@ libation:
         main:
           image:
             repository: ubuntu
-            tag: resolute-20260404@sha256:cc925e589b7543b910fea57a240468940003fbfc0515245a495dd0ad8fe7cef1
+            tag: resolute-20260401
+            pullPolicy: IfNotPresent
           command:
             - "sleep"
             - "infinity"
@@ -44,6 +50,7 @@ libation:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 500Mi
+      retain: true
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:eaa092df6ae81137c5a62622f9e09495a9bc886ae908202b120969948206d786
-generated: "2026-04-04T21:03:34.837519-05:00"
+digest: sha256:0f1a2923a7042b364a817edc64729d5e1c18b0552555c035d974de626f372692
+generated: "2026-03-15T20:07:00.750754951Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -4,18 +4,17 @@ version: 1.0.0
 description: Lidarr
 keywords:
   - lidarr
-  - music
   - servarr
-home: https://docs.alexlebens.dev/applications/lidarr/
+  - music
+  - metrics
+home: https://wiki.alexlebens.dev/s/f7c4e892-aa3b-435f-b220-317dc53137ac
 sources:
   - https://github.com/Lidarr/Lidarr
   - https://github.com/linuxserver/docker-lidarr
-  - https://github.com/onedr0p/exportarr
-  - https://github.com/linuxserver/docker-lidarr/pkgs/container/lidarr
+  - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/onedr0p/exportarr/pkgs/container/exportarr
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -25,12 +24,11 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
     version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
-# renovate: datasource=github-releases depName=linuxserver/docker-lidarr
 appVersion: 3.1.2-nightly

clusters/cl01tl/helm/lidarr/values.yaml

@@ -4,6 +4,7 @@ lidarr:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       pod:
         securityContext:
           runAsUser: 1000
@@ -14,10 +15,11 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:2b602738585d64c62e119073c631e50872f07595d2d90936a9186f2989cb2eda
+            tag: 3.1.2-nightly@sha256:034055feee43b11eb2f7a8438a9af1c99ab564dd2b43e5df2fe5b3c9b3b8b1ac
+            pullPolicy: IfNotPresent
           env:
             - name: TZ
-              value: America/Chicago
+              value: US/Central
             - name: PUID
               value: 1000
             - name: PGID
@@ -25,11 +27,12 @@ lidarr:
           resources:
             requests:
               cpu: 100m
-              memory: 300Mi
+              memory: 256Mi
         metrics:
           image:
             repository: ghcr.io/onedr0p/exportarr
-            tag: v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
+            tag: v2.3.0
+            pullPolicy: IfNotPresent
           args: ["lidarr"]
           env:
             - name: URL
@@ -42,6 +45,10 @@ lidarr:
               value: false
             - name: ENABLE_UNKNOWN_QUEUE_ITEMS
               value: false
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
   service:
     main:
       controller: main
@@ -49,9 +56,11 @@ lidarr:
         http:
           port: 80
           targetPort: 8686
+          protocol: HTTP
         metrics:
           port: 9792
           targetPort: 9792
+          protocol: TCP
   serviceMonitor:
     main:
       selector:
@@ -86,8 +95,11 @@ lidarr:
                 type: PathPrefix
                 value: /outpost.goauthentik.io
         - backendRefs:
-            - name: lidarr
+            - group: ''
+              kind: Service
+              name: lidarr
               port: 80
+              weight: 100
           filters:
             - type: ExtensionRef
               extensionRef:
@@ -104,6 +116,7 @@ lidarr:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 10Gi
+      retain: true
       advancedMounts:
         main:
           main:
@@ -137,12 +150,35 @@ postgres-18-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
+      # - name: garage-remote
+      #   index: 1
+      #   destinationBucket: postgres-backups
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   retentionPolicy: "90d"
+      #   data:
+      #     compression: bzip2
+      # - name: external
+      #   index: 1
+      #   endpointURL: https://nyc3.digitaloceanspaces.com
+      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 55 14 * * *"
         backupName: garage-local
+      # - name: weekly-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 4 * * SAT"
+      #   backupName: garage-remote
+      # - name: daily-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 0 * * *"
+      #   backupName: external
 volsync-target-config:
   pvcTarget: lidarr-config
   moverSecurityContext:

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -5,7 +5,8 @@ description: Local Path Provisioner
 keywords:
   - local-path-provisioner
   - storage
-home: https://docs.alexlebens.dev/applications/local-path-provisioner/
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/fa4d4152-b9dd-4fdc-a6f2-93a2c0df7f4a
 sources:
   - https://github.com/rancher/local-path-provisioner
   - https://hub.docker.com/r/rancher/local-path-provisioner

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -1,11 +1,10 @@
 local-path-provisioner:
-  replicaCount: 1
   image:
     repository: rancher/local-path-provisioner
-    tag: v0.0.35@sha256:34ff0847cc47ebf69656ba44a3de9324596d0036b66ffd323b21614dd8221530
+    tag: v0.0.35
   helperImage:
     repository: busybox
-    tag: 1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
+    tag: 1.37.0
   storageClass:
     create: true
     defaultClass: false
@@ -13,10 +12,6 @@ local-path-provisioner:
     name: local-path
     reclaimPolicy: Delete
     volumeBindingMode: WaitForFirstConsumer
-  resources:
-    limits:
-      cpu: 1m
-      memory: 30Mi
   nodePathMap:
     - node: DEFAULT_PATH_FOR_NON_LISTED_NODES
       paths:

clusters/cl01tl/helm/loki/Chart.lock

@@ -6,4 +6,4 @@ dependencies:
   repository: https://grafana.github.io/helm-charts
   version: 1.7.0
 digest: sha256:e6a06dc016858215a461d05c543b937f7a87ecc1bb58381cd6fb825ba524fa66
-generated: "2026-04-02T19:05:47.897397013Z"
+generated: "2026-04-02T16:07:49.166465285Z"