chore(deps): update helm release traefik to v40

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.169.4@sha256:4c84638a2b70b2fe2c3bbf87d25e6f8aba40d83f8ca2b7c0bd3d0f1a4591ef7b
+    container: ghcr.io/renovatebot/renovate:43.168.2@sha256:0620025474a7c971ef1d98ef3e66e1cc1e3975252dce72d7f6bd807a800ac439
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:9468b3406ab0d91bf44a1a940eca8648782f3519d0c683d21b33e16c258c9175
-generated: "2026-05-07T21:23:05.56246-05:00"
+  version: 1.1.1
+digest: sha256:e472c85ad45c6071ccc3a23047927aba42814a931865736e40ad5c16d597ea53
+generated: "2026-04-28T23:30:55.463292642Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -17,10 +17,10 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual

clusters/cl01tl/helm/actual/values.yaml

@@ -75,7 +75,7 @@ volsync-target-data:
     schedule: 0 8 * * *
   remote:
     enabled: true
-    schedule: 0 10 * * 0
+    schedule: 0 9 * * *
   external:
     enabled: true
-    schedule: 0 9 * * 0
+    schedule: 0 10 * * *

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.12
+    version: 9.5.11
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.1
+appVersion: v3.3.9

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
+  version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:57c3cc8da25c1dfc8684c5f20f804ce4642abee25cb317097ce6bd17f8bb0504
-generated: "2026-05-07T21:23:15.021738-05:00"
+  version: 1.1.1
+digest: sha256:2275b211b02253019e5830e0258f936f1494380cc50cea03bc31d75281365dcc
+generated: "2026-04-28T17:54:10.288277-05:00"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,14 +21,14 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -132,10 +132,10 @@ volsync-target-config:
     schedule: 2 8 * * *
   remote:
     enabled: true
-    schedule: 2 10 * * 0
+    schedule: 2 9 * * *
   external:
     enabled: true
-    schedule: 2 9 * * 0
+    schedule: 2 10 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
@@ -143,7 +143,7 @@ volsync-target-metadata:
     schedule: 4 8 * * *
   remote:
     enabled: true
-    schedule: 4 10 * * 0
+    schedule: 4 9 * * *
   external:
     enabled: true
-    schedule: 4 9 * * 0
+    schedule: 4 10 * * *

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:76aa807daaf18fe785313337c497bebebb886ba61aa91c8673fda0d2beb7ce4b
-generated: "2026-05-07T20:43:17.501180286Z"
+digest: sha256:82e85dc79199cc8b75dde412d595621817b3fa2c073c131162d0079a0b63f369
+generated: "2026-04-28T23:31:05.864191451Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 1.1.1

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:0adc80cc222c07512735082e4668ae25f349c0eee179b890c27593ef4194070d
-generated: "2026-05-07T20:43:27.778874315Z"
+digest: sha256:9228c387a1b50545d8b348c94ae55b17952d32652ca48d0329c65f4ee651706e
+generated: "2026-04-28T23:31:15.743170757Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 1.1.1

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:64754cc5f9a68f6daf6b334255ee33aa7980704ddb803db46a99de7871086387
-generated: "2026-05-07T20:43:39.015344585Z"
+digest: sha256:855928ecd442b96a98bbeb9f957951cb70a8ab07e3c45ffd2ab33dcd5bf85a18
+generated: "2026-05-02T01:46:25.970760734Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: valkey
     alias: valkey
     version: 0.7.0

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.5.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
-generated: "2026-05-07T01:19:41.214483969Z"
+  version: 0.5.0
+digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
+generated: "2026-05-02T01:21:57.977371366Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
   nameOverride: postgres-backups-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 1
+    schedule: 0 6 * * 6
   rclone:
     source:
       bucketName: postgres-backups
@@ -44,13 +44,14 @@ rclone-postgres-backups-remote:
 rclone-postgres-backups-external:
   nameOverride: postgres-backups-external-rclone
   cronJob:
-    suspend: false
-    schedule: 0 6 * * 1
+    suspend: true
+    schedule: 0 6 * * 6
   rclone:
     source:
-      bucketName: postgres-backups
+      bucketName: openbao-backups
     destination:
-      bucketName: postgres-backups-775957147abfbc73
+      bucketName: postgres-backups-ecc1010276b61716
+      providerType: DigitalOcean
   prune:
     enabled: true
     ageToPrune: 45d
@@ -65,10 +66,10 @@ rclone-postgres-backups-external:
           path: /garage/config
       destination:
         credentials:
-          path: /backblaze/home-infra/postgres-backups
+          path: /digital-ocean/home-infra/postgres-backups
           keyIdProperty: AWS_ACCESS_KEY_ID
           secretKeyProperty: AWS_SECRET_ACCESS_KEY
           regionProperty: AWS_REGION
         config:
-          path: /backblaze/config
+          path: /digital-ocean/config
           endpointProperty: ENDPOINT

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:b91492397614b3b1b4647b93ae752de443b2c7438b0767780667625e28e5d929
-generated: "2026-05-07T20:43:49.470766652Z"
+digest: sha256:3cd2af21091719533fb337241480c613ab14b3cb5820af6e386936ddf4243c14
+generated: "2026-05-02T01:46:38.13080627Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: dawarich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1

clusters/cl01tl/helm/descheduler/values.yaml

@@ -10,7 +10,7 @@ descheduler:
     requests:
       cpu: 10m
       memory: 50Mi
-  deschedulingInterval: 2m
+  deschedulingInterval: 5m
   replicas: 3
   leaderElection:
     enabled: true
@@ -51,13 +51,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 30
-                memory: 30
-                pods: 30
+                cpu: 20
+                memory: 20
+                pods: 20
               targetThresholds:
-                cpu: 45
-                memory: 45
-                pods: 45
+                cpu: 50
+                memory: 50
+                pods: 60
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
@@ -10,9 +10,6 @@ dependencies:
   version: 0.7.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3b9360b8254c3b79ddaa5da6f9d030ff954a69529d4a61d67b5e4d7797a0072c
-generated: "2026-05-07T20:44:01.505038102Z"
+  version: 0.5.0
+digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
+generated: "2026-05-02T01:46:52.095684422Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
@@ -31,11 +31,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
-  - name: rclone-bucket
-    alias: rclone-directus-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/directus/values.yaml

@@ -211,10 +211,9 @@ valkey:
         default:
           permissions: "~* &* +@all"
 rclone-directus-assets-remote:
-  nameOverride: directus-assets-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 2
+    schedule: 0 0 * * *
   rclone:
     source:
       bucketName: directus-assets
@@ -232,26 +231,3 @@ rclone-directus-assets-remote:
           path: /garage/home-infra/directus-assets
         config:
           path: /garage/config
-rclone-directus-assets-external:
-  nameOverride: directus-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 2
-  rclone:
-    source:
-      bucketName: directus-assets
-    destination:
-      bucketName: directus-assets-37363a16b71dc59b
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/directus-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/directus-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/eraser/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:b510fa700aade3c4ff5d8cacd8099c6f52d958aff97d436d4fe63abde2200439
-generated: "2026-05-07T20:44:14.408868308Z"
+  version: 4.6.2
+digest: sha256:8414813d3d9d195b16ef7ebf814f7095a16413f4b0e579fcb37738000624f68c
+generated: "2026-04-08T21:39:05.689756-05:00"

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: eraser-metrics
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
 # renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/eraser/templates/namespace.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: {{ .Release.Namespace }}
-    {{- include "custom.labels" . | nindent 4 }}
-    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/helm/eraser/values.yaml

@@ -44,8 +44,6 @@ eraser-metrics:
       type: deployment
       replicas: 1
       strategy: Recreate
-      serviceAccount:
-        name: eraser-metrics
       containers:
         main:
           image:
@@ -85,9 +83,6 @@ eraser-metrics:
                   - otlp
                 exporters:
                   - prometheus
-  serviceAccount:
-    eraser:
-      enabled: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:297d4f45c64ccbaac66c103774e97bacde3f249cab40afef06c0c1106b62ab79
-generated: "2026-05-07T20:44:26.213030206Z"
+  version: 4.6.2
+digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: excalidraw
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
 # renovate: datasource=github-releases depName=excalidraw/excalidraw
 appVersion: v0.18.1

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -8,7 +8,7 @@ excalidraw:
         main:
           image:
             repository: excalidraw/excalidraw
-            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
+            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/foldergram/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:44bd265d4dbfd544e40a08858e0b806559881f1d1d3261b094a16a501e7b9040
-generated: "2026-05-07T20:44:36.197328775Z"
+digest: sha256:942224d5a91527ca20a46363d9c5b165643b11df043c119a315f94931e9e4975
+generated: "2026-04-28T23:31:37.471509638Z"

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: foldergram
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.6.0

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.6.0
@@ -11,5 +11,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:e2cb16a320b629a1c8d45e9a35b49819efbc17a1a572ad93cf2a28d13c7a0596
-generated: "2026-05-07T20:44:46.730609954Z"
+digest: sha256:6b2bae691798ed86c9549dfce0c455015533f00fff92363b58bce61201fbfc8d
+generated: "2026-04-28T23:31:47.227478798Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.6.0

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:925129100b32d9daf71142dc3fc42914cc26d40581a523c574c81ec79e2a0fc6
-generated: "2026-05-07T20:44:57.951189479Z"
+  version: 4.6.2
+digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
+generated: "2026-01-16T18:46:33.321938614Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
 appVersion: v2.3.0

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.33
-digest: sha256:c08407bfa5509e7805760023be163f2597ff41af1183a9b258413230e907d830
-generated: "2026-05-07T19:57:30.083273789Z"
+  version: 0.20.31
+digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
+generated: "2026-04-15T01:16:30.361061773Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.33
+    version: 0.20.31
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -411,6 +411,24 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-version-checker-internal
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/grimmory/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
   version: 26.3.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:d48478ee6ff87314c17f3365455647490a104db1ce2dfdfa4464a3074a5450b8
-generated: "2026-05-07T20:45:10.252099033Z"
+digest: sha256:3e1a513297b39105174d3f1d6010ac85526de3d9cf6418ea724599b42e8c0cd9
+generated: "2026-04-28T23:32:22.706602876Z"

clusters/cl01tl/helm/grimmory/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: grimmory
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: mariadb-cluster
     version: 26.3.0
     repository: https://helm.mariadb.com/mariadb-operator

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.19.0
+  version: 1.18.3
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d4582a89bf46e503bf83d266aca5effaeec2554808a9e84cd1460e47f895f3e0
-generated: "2026-05-07T00:54:42.114366405Z"
+digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
+generated: "2026-05-02T01:47:39.632625858Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.19.0
+    version: 1.18.3
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/harbor/values.yaml

@@ -59,7 +59,7 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
+        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
     controller:
       image:
         repository: ghcr.io/goharbor/harbor-registryctl

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.42.0
-digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
-generated: "2026-05-07T20:38:18.198513024Z"
+  version: 0.41.0
+digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
+generated: "2026-03-26T15:07:50.703213905Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.42.0
+    version: 0.41.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: vv0.42.0
+appVersion: v0.41.0

clusters/cl01tl/helm/headlamp/values.yaml

@@ -3,7 +3,7 @@ headlamp:
   image:
     registry: ghcr.io
     repository: headlamp-k8s/headlamp
-    tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
+    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
   config:
     oidc:
       secret:

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:554c42e562cc0ace116ac34da55bd24bc3d52aad356a2cc7b76b484feb88af53
-generated: "2026-05-07T20:45:23.19652318Z"
+digest: sha256:0c0dd41e2bd0102b956697b2171e223988042072fe61b7b979d4091e76fca9d4
+generated: "2026-04-28T23:32:34.16634307Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.0
+appVersion: 2026.4.4

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
+            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
+            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:81785552a943df54d09164776a170a007573e38ab96b00872bb22030079076e9
-generated: "2026-05-07T20:45:33.699577658Z"
+  version: 4.6.2
+digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
+generated: "2026-01-16T18:47:06.186790637Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
 appVersion: v1.12.3

clusters/cl01tl/helm/homepage/values.yaml

@@ -8,6 +8,8 @@ homepage:
       strategy: Recreate
       annotations:
         reloader.stakater.com/auto: "true"
+      serviceAccount:
+        name: homepage
       pod:
         automountServiceAccountToken: true
       containers:
@@ -25,6 +27,10 @@ homepage:
             requests:
               cpu: 1m
               memory: 128Mi
+  serviceAccount:
+    homepage:
+      enabled: true
+      staticToken: true
   configMaps:
     config:
       enabled: true
@@ -879,9 +885,9 @@ homepage:
               - Github:
                   - abbr: GH
                     href: https://github.com/alexlebens
-              - Backblaze:
-                  - abbr: BB
-                    href: https://secure.backblaze.com
+              - Digital Ocean:
+                  - abbr: DO
+                    href: https://www.digitalocean.com/
               - Cloudflare:
                   - abbr: CF
                     href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
@@ -891,6 +897,9 @@ homepage:
               - ProtonVPN:
                   - abbr: PV
                     href: https://account.protonvpn.com/
+              - AirVPN:
+                  - abbr: AV
+                    href: https://airvpn.org/
               - Unifi:
                   - abbr: UF
                     href: https://unifi.ui.com/

clusters/cl01tl/helm/houndarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:fd6ff9a15f699ed14d82f2fd80bcd648135de49e2a04d32ff42e17ffa019efc5
-generated: "2026-05-07T20:45:43.485504217Z"
+digest: sha256:de21eea7c5550645f0f1208758c3a81c6e015b90eae728c0b9740ddfc3f26880
+generated: "2026-04-28T23:32:44.359353393Z"

clusters/cl01tl/helm/houndarr/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: houndarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
@@ -11,5 +11,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:4d5c4d299c12fa59b9cf7b5c91c36785b5e06c49d63483b6eb46784ab814a6fb
-generated: "2026-05-07T20:45:53.336834555Z"
+digest: sha256:a0fdf72de4f4e2a475035e6ece26fe570e548895db02374a08fd4f3481c55dc0
+generated: "2026-05-02T01:47:54.093954603Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1

clusters/cl01tl/helm/immich/values.yaml

@@ -4,8 +4,8 @@ immich:
       type: deployment
       replicas: 1
       strategy: Recreate
-      pod:
-        automountServiceAccountToken: true
+      serviceAccount:
+        name: immich
       containers:
         main:
           image:
@@ -88,6 +88,10 @@ immich:
               gpu.intel.com/i915: 1
               cpu: 10m
               memory: 500Mi
+  serviceAccount:
+    immich:
+      enabled: true
+      staticToken: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/isponsorblocktv/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:61c0d967c3f1f6e12fc8effa4add37ba7b307f680280f8e5ff2cb772cfc73213
-generated: "2026-05-07T20:46:03.870794632Z"
+  version: 4.6.2
+digest: sha256:65da71c32b4576a11e590f059d97dae22137448cb71049258d018cf5b7bb4a92
+generated: "2026-04-26T14:59:16.326539-05:00"

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: isponsorblocktv
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
 appVersion: v2.8.1

clusters/cl01tl/helm/isponsorblocktv/values.yaml

@@ -4,8 +4,8 @@ isponsorblocktv:
       type: deployment
       replicas: 1
       strategy: Recreate
-      pod:
-        automountServiceAccountToken: true
+      serviceAccount:
+        name: isponsorblocktv
       containers:
         main:
           image:
@@ -15,6 +15,10 @@ isponsorblocktv:
             requests:
               cpu: 1m
               memory: 20Mi
+  serviceAccount:
+    isponsorblocktv:
+      enabled: true
+      staticToken: true
   persistence:
     config:
       type: custom

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:6b056268814206f3f20cefbbc2738fe1c80d9779b9e7da93ded7182aad7b5314
-generated: "2026-05-07T20:46:14.100864595Z"
+digest: sha256:e087d85b352de607cecf84a09bec368f37dbb63bfcc8c5bc1ebfbe97de121231
+generated: "2026-04-28T23:33:06.05345494Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:b0e37301973eb2307d95642e1b4949d7c65ae35a7aa9fc654141d7965cd0b9ef
-generated: "2026-05-07T20:46:25.887979086Z"
+digest: sha256:ef0f5d679b6e46d3bbfb37f4b06cba7b8ca98955de2be961366b5b23feda884c
+generated: "2026-04-28T23:33:17.913213442Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
@@ -13,9 +13,6 @@ dependencies:
   version: 1.1.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:7e57d3aa72a659dd658da4b46367828c2a1c2241a36eeee6e8ebab772dd46e28
-generated: "2026-05-07T20:46:37.384681496Z"
+  version: 0.5.0
+digest: sha256:399d686a6186e665a804f98a3dca1132d028f6cb9fc458866ec94b09920dbb6f
+generated: "2026-05-02T01:23:08.040832303Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
@@ -36,11 +36,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
-  - name: rclone-bucket
-    alias: rclone-karakeep-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0

clusters/cl01tl/helm/karakeep/values.yaml

@@ -175,7 +175,7 @@ volsync-target-data:
 rclone-karakeep-assets-remote:
   cronJob:
     suspend: false
-    schedule: 30 6 * * 3
+    schedule: 10 0 * * *
   rclone:
     source:
       bucketName: karakeep-assets
@@ -193,26 +193,3 @@ rclone-karakeep-assets-remote:
           path: /garage/home-infra/karakeep-assets
         config:
           path: /garage/config
-rclone-karakeep-assets-external:
-  nameOverride: karakeep-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 3
-  rclone:
-    source:
-      bucketName: karakeep-assets
-    destination:
-      bucketName: karakeep-assets-bcb0bc04dac3e3fd
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/karakeep-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/karakeep-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/kiwix/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:c2ea7bdfa94d5489a0ace86b807949d3cfb0d436ce49a78bcbde0c6f1798608b
-generated: "2026-05-07T20:46:50.166598682Z"
+  version: 4.6.2
+digest: sha256:aab81291201585c1169bd5d160768441b7c26670a78bcbefca6a781be0924576
+generated: "2026-01-16T18:48:20.708363828Z"

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 # renovate: datasource=github-releases depName=kiwix/kiwix-tools
 appVersion: 3.8.2

clusters/cl01tl/helm/komodo/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:65b4d31895d55b8259d21be845762fb6f8d8a098f93d1e14bde5e60522a24441
-generated: "2026-05-07T20:46:59.818064183Z"
+digest: sha256:275833c68c02ccd34edaf4ccd38b901293c0a2e11e6ae3b7b2c8fdccf58d7b56
+generated: "2026-04-28T23:33:42.286082953Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
     version: 7.12.1
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.2.0
+appVersion: v2.1.2

clusters/cl01tl/helm/komodo/values.yaml

@@ -8,7 +8,7 @@ komodo:
         main:
           image:
             repository: ghcr.io/moghtech/komodo-core
-            tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
+            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
           env:
             - name: COMPOSE_LOGGING_DRIVER
               value: local

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 28.0.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e91322188f0f897dd51b8916cab2412b5bf8295eb484e0999b4c6b7d8b8402a6
-generated: "2026-05-07T20:47:09.771445791Z"
+digest: sha256:902e19ae8e5818d1ac4c30f804e616e8428b927358e4823ef6e373fdf655cba1
+generated: "2026-05-02T01:48:08.598425992Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: valkey
     alias: valkey
     version: 0.7.0

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -121,8 +121,6 @@ ntfy-alertmanager:
       type: deployment
       replicas: 1
       strategy: Recreate
-      pod:
-        automountServiceAccountToken: true
       serviceAccount:
         name: ntfy-alertmanager
       containers:
@@ -130,6 +128,10 @@ ntfy-alertmanager:
           image:
             repository: xenrox/ntfy-alertmanager
             tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
+  serviceAccount:
+    ntfy-alertmanager:
+      enabled: true
+      staticToken: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:f646d2de1a56914cc1b94a661a869e7f89579f0000bbc79078801b757925931a
-generated: "2026-05-07T20:47:20.425067929Z"
+  version: 4.6.2
+digest: sha256:c0c65eaac1dfcc33b70a59d12319dee96ccd28cdd9fb201cd091f1802b0b2892
+generated: "2026-01-16T18:48:53.976469964Z"

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kubelet-serving-cert-approver
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
 appVersion: 0.10.3

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -29,6 +29,8 @@ kubelet-serving-cert-approver:
       type: deployment
       replicas: 1
       strategy: Recreate
+      serviceAccount:
+        name: kubelet-serving-cert-approver
       pod:
         automountServiceAccountToken: true
       containers:
@@ -55,6 +57,10 @@ kubelet-serving-cert-approver:
             privileged: false
             readOnlyRootFilesystem: true
             runAsNonRoot: true
+  serviceAccount:
+    kubelet-serving-cert-approver:
+      enabled: true
+      staticToken: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
-digest: sha256:f79a24fbe6769992af0f7c5034713b564f91208497da193265fbce5aac8fb637
-generated: "2026-05-07T20:47:30.731469034Z"
+  version: 4.6.2
+digest: sha256:6cba91672ca98d62208b3ff7cb1b7ffaaf44140bb3a54196c80126a82a0d2430
+generated: "2026-01-16T18:49:04.125289391Z"

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: kubernetes-cloudflare-ddns
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 # renovate: datasource=github-releases depName=kubitodev/kubernetes-cloudflare-ddns
 appVersion: v2.0.0

clusters/cl01tl/helm/languagetool/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:9f1dda1fed46c9ab91366860c9fae0cd3aea96e69b0c59076192da56ba1ba450
-generated: "2026-05-07T20:47:41.192438777Z"
+digest: sha256:f37d15a563f128c99666136b1f361e81f3756af78321f7a9ac96b9ccf40aba0d
+generated: "2026-04-28T23:33:52.4031148Z"

clusters/cl01tl/helm/languagetool/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: languagetool
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1

clusters/cl01tl/helm/libation/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:51eaf628acb021169bbad4243fdc24f27c5ffeddbeda080146149a5a3a89c851
-generated: "2026-05-07T20:47:51.79683243Z"
+digest: sha256:f93fec3b053028a5a2398ee3a133031f348c77c7c544608b3cc26f4ac6b0723c
+generated: "2026-04-28T23:34:02.933569166Z"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -19,11 +19,11 @@ dependencies:
   - name: app-template
     alias: libation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.4.1
+appVersion: 13.3.6

clusters/cl01tl/helm/libation/values.yaml

@@ -12,7 +12,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
+            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
           env:
             - name: SLEEP_TIME
               value: "-1"

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:2bbc03dd6c95e73aeb49427402671965b2b7e2ee2b6d9de47c5c40bf65e49b98
-generated: "2026-05-07T20:48:04.35887055Z"
+digest: sha256:764f22175876a5841fe145fc59cc3c724ada8d827287ac15d414e1d661d2b807
+generated: "2026-04-28T23:34:13.853002968Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
   - name: app-template
     alias: lidarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.6.1
+  version: 13.5.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 1.8.1
-digest: sha256:2590c2358db4fc9313f9c506998f4e851ee291ae9c1419f1fe5bb9a73d464e60
-generated: "2026-05-07T19:56:09.168096358Z"
+  version: 1.8.0
+digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
+generated: "2026-05-02T19:36:44.416322-05:00"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,10 +15,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.6.1
+    version: 13.5.0
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
-    version: 1.8.1
+    version: 1.8.0
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -4,13 +4,13 @@ dependencies:
   version: 3.12.26
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.6.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:1f4d854eaf1a0a509094ad9aec4ab7ab6c7b857df0978e9f46da6a0bd7bd7a8d
-generated: "2026-05-07T20:48:15.965344141Z"
+digest: sha256:4377d9ff96042ba996b879caf6108260d2eb9d20bccdb26ae7042d96d2772012
+generated: "2026-05-03T01:00:09.899197368Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -30,16 +30,16 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
-    version: 5.0.0
+    version: 4.6.2
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: app-template
     alias: mautrix-discord
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: app-template
     alias: mautrix-whatsapp
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
     version: 2.6.0
@@ -78,4 +78,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: vv1.152.1
+appVersion: vv1.152.0

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -1,7 +1,7 @@
 matrix-synapse:
   image:
     repository: ghcr.io/element-hq/synapse
-    tag: v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297
+    tag: v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c
   serverName: alexlebens.dev
   publicServerName: matrix.alexlebens.dev
   argoCD: true

clusters/cl01tl/helm/medialyze/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:0a566ebdffcf2df14604d46f1ff2a1060655df6735d1c197af150da14af529ea
-generated: "2026-05-07T20:48:28.943606827Z"
+digest: sha256:9664dab6f824365a48e0e1225488abd6b290a5643e5b26c9339c37a3e06eb23d
+generated: "2026-04-28T23:34:39.124342667Z"

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: medialyze
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.10.2
+appVersion: 0.10.1

clusters/cl01tl/helm/music-grabber/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:bf3de8b8672396450124c2585cc14ed6e94ee5d5e6a03683e42bb518d2ee082c
-generated: "2026-05-07T20:48:40.399203978Z"
+digest: sha256:1b2d658398bd47809028f31e953cf1f7ab0d5ceb6d36277038fb089aafdb650c
+generated: "2026-04-28T23:34:48.865915525Z"

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: music-grabber
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1

clusters/cl01tl/helm/navidrome/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:8b7bff59a137424f2499ff1e62ab6e4e881c3695b76efb771744ba94e2a61787
-generated: "2026-05-07T20:48:50.112944233Z"
+digest: sha256:f6a7fb57b14edc3fca83a4c38a95a63397b2c83cad18254e2cce445b13c0cd52
+generated: "2026-04-28T23:34:58.66581168Z"

clusters/cl01tl/helm/navidrome/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: navidrome
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:fe94272107fdbae9995e7541c89ff94b3840ff8c03e282bf07fda914f5993adc
-generated: "2026-05-07T20:49:00.879209183Z"
+  version: 0.5.0
+digest: sha256:7defcecc03024b82d4f1e19b39f0fbe1725b1077e72e1664326ffa0e40e4f27f
+generated: "2026-05-02T01:23:52.599948616Z"