feat(helm): update chart app-template to 3.5.1

2024-10-17 22:07:54 +00:00
49 changed files with 103 additions and 139 deletions
--- a/kubernetes/common/apps/cert-manager/app/files/helm-release.yaml
+++ b/kubernetes/common/apps/cert-manager/app/files/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: cert-manager
-      version: v1.16.1
+      version: v1.15.3
      sourceRef:
        kind: HelmRepository
        name: jetstack-charts
--- a/kubernetes/common/apps/intel-gpu/files/gpu-plugin.yaml
+++ b/kubernetes/common/apps/intel-gpu/files/gpu-plugin.yaml
@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: intel-device-plugins-gpu
-      version: 0.31.1
+      version: 0.31.0
      sourceRef:
        kind: HelmRepository
        name: intel
--- a/kubernetes/common/apps/intel-gpu/files/intel-device-plugins-operator.yaml
+++ b/kubernetes/common/apps/intel-gpu/files/intel-device-plugins-operator.yaml
@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: intel-device-plugins-operator
-      version: 0.31.1
+      version: 0.31.0
      sourceRef:
        kind: HelmRepository
        name: intel
--- a/kubernetes/common/apps/nfd/files/nfd.yaml
+++ b/kubernetes/common/apps/nfd/files/nfd.yaml
@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: node-feature-discovery
-      version: 0.16.6
+      version: 0.16.4
      sourceRef:
        kind: HelmRepository
        name: nfd-charts
--- a/kubernetes/common/bootstrap/flux/forgejo-deploy-key.sops.yaml
+++ b/kubernetes/common/bootstrap/flux/forgejo-deploy-key.sops.yaml
@ -5,72 +5,72 @@ metadata:
    namespace: flux-system
 type: Opaque
 stringData:
-    identity: ENC[AES256_GCM,data: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,iv:/39YiKJ5i6LRchiElgrClE20iJuV4SF7HB95Qi7lRdo=,tag:IQCxRRHEFg5XypwjQP7VDQ==,type:str]
-    identity.pub: ENC[AES256_GCM,data:qNJjZriw2GgTMUz85E7R91n2m0cAlqWn4mZdOUgppOMGWEwxiIma4vM3YGkx2Ltt0u78rzng1KJBLSHRXvygJiQLj72+nDYqNuoSK5EQDjk=,iv:VVIX7dU/JO7mCBa/J7gBSYvNX+xyQRtKRzx/BEe0Ny0=,tag:5VO+ib7+qKX6FFefXIGODQ==,type:str]
-    known_hosts: ENC[AES256_GCM,data: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,iv:5Zi1hQ7sQQFJMB4Ynk8QfyEDco4KrSsriFYHgho6YLU=,tag:t+Z8okFnDFCvt/uLfr06Cw==,type:str]
-    password: ENC[AES256_GCM,data:fGFEgW7D5M0if8qqfNGFUP3cUCW8Nn/XsmRf0PM21vDLjrYzuOLHJA==,iv:ds829XOqukonj7fqZWO+ErK6IDGb61nCa/lwEp0P91Y=,tag:gtudo2jdx6Totv6JcUKBEg==,type:str]
-    username: ENC[AES256_GCM,data:44LM,iv:uBoSRjeqqq0CC4BRcpp2F0ua09nOI3kaWcAJA2AOFyU=,tag:cjyOHOG+hoPHc2pVvJ8+5A==,type:str]
+    identity: ENC[AES256_GCM,data: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,iv:GkEzgT4SSoqkl6Q7ceZrmt9U303lB3JFQ7AiLj27ElE=,tag:2nsq2GgkkvZts40lztg17g==,type:str]
+    identity.pub: ENC[AES256_GCM,data:D+Vm8UYZnigJpJ4G6BWaXJx0aASRmfURe9HmMPCgXBTHYtqEaU3MAZ2/YcBBBSrLBjziaS1D86g2coPfWOcmwJ4NPOKjJSV10cFsZIPnk4w=,iv:TDZi/AxIJHY2IGgTyOS7oGErPxaYMtBek8efalLmsJw=,tag:feL7jyXQabIvmbB0y5qNiQ==,type:str]
+    known_hosts: ENC[AES256_GCM,data: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,iv:r63R2DHRHmWEOklp8Fp60R293bphRo0fEtBbfY6kwtE=,tag:WvAkb38Bb+nco/ZpaXhP3A==,type:str]
+    password: ENC[AES256_GCM,data:6VdCKBqa6tSVKr+zh/X4eTEX3kG6k1VjFt3PJ5Sx064viFfxOdl5Xw==,iv:Um82ZkCtJr7UZAhu3e06tzQYPJhU+nCrwyH1lQ/FP6A=,tag:Ydookfcn2C+hpdDcHhdBbg==,type:str]
+    username: ENC[AES256_GCM,data:XneA,iv:6jH3tuWgC6J1GfSvQ2DxumxhJfNHCE+EvLy1CVKomy4=,tag:Jpk+AqScz8SrGRNEaVfoiA==,type:str]
 sops:
    kms: []
    gcp_kms: []
    azure_kv: []
    hc_vault: []
    age: []
-    lastmodified: "2024-10-18T23:02:46Z"
-    mac: ENC[AES256_GCM,data:8ESBtPXyeYNjGJ8FLmslEolr/F1gq5XBAkPuPQQxm5SnM++TwbG0E2oyy8TD7FYa62l48Rsdl+o02cwAI8KFk7zcy6588Ti7IBszmkanlDZy0VqoD4rAY4WJZ2m8m0yJEx7roM7gQm0nYJGRufRyK+g2OjVh1YQBxGymnrL2Jtg=,iv:CvFWYFxHfCH8ChQp9XA6S36vswnhUBNRkfW2ZmuIvGE=,tag:Jl+vffpyK1iYzXC1lgJT+Q==,type:str]
+    lastmodified: "2024-08-03T21:27:12Z"
+    mac: ENC[AES256_GCM,data:lbcdmV8GaSg/7IEvBTASEOamqLae4SlKEd0pwejnWam6UGWqiYYRYHeHdPJCycWC6xQYc6/S0i7tZf41jhb78nYdp5LsPQ//p9m2/eYKTuNFUuOOnhV6WVP+bkPexsWGPvL85F8hwNutCEpAs6msKkR8Fj2SRgmUn2L/fyx8KKY=,iv:d1y86x1svh9T6XVMi+7sGx/iVDvlk9pgXAogtwHwpmw=,tag:kRZ5xZKpj727O20efLpSyg==,type:str]
    pgp:
-        - created_at: "2024-10-18T23:02:46Z"
+        - created_at: "2024-08-03T21:27:12Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMAwAAAAAAAAAAAQ//cYkEt2KpQw/5VtIM9Ym1c2i2MCSh7y+nQdzocy4RF2Iw
-            H7jR99FHl7vFfNp4tJyfz+OGnE/3B2EqDUM2bCmrp1628iQext0ExKSAheIJygPZ
-            6lMpOEBlW51BMdYxSE+PJh+F/Q7Bpnwnf5BJDkobeoKdTrItu24krFJdMjakZmwN
-            96yGH0C80rtEHHn1A2/MpgBnCBClsJx+HRdp8Tc4552uD2mYYahJmrKzh7euqJbV
-            jgCgJtL8RxBArNsDiWCCe2QuKjMCjpstuP6xS7RDMVkB7U//IrIa3D1RqQOEYzTP
-            s9HngMBuvxj6T1iHBXPYIzqr/cHMPtXd/1wJIPpICe6dThbJruPUAyg4cO/bPy1C
-            UhxWyqLKY3i3OyI9YvlXpNEyordqgVMuA9SYnLB9M7es+MjKMcHFwG0zX4hs6Qaq
-            Bozf51pzogZcjIuEM+sl54IwQsAnAWcpNGRPNtzIKf8LwEihJhfkOCRFArbuIxzB
-            8Am7CMkcQLTqN4jckdYfSELK2pUfLgV73XMcmgtUz7/NugpdvcIpByLmSz0+04L0
-            /FYWAy5rto0c5HDkF3tV+88EuThbsuYp3zQpA7QP9eH7TdZqnvE6ouhQhmxUR/99
-            4aZHHQ7sIbtscmyU9eUo6M8pCHpk7tfkp8wWQjoo99oyxE/1qfY58BonaQ4+E/mF
-            AgwDAAAAAAAAAAABD/4v3+2tYz9hkNRN11ubHqYDkLT4PB1+2YLxXUJlYr44UWkl
-            JLv1jwGdLHuGiC/nF0YQpvEU7+yMnz8JUKU1S3vdJxFm3t1qvx57iSPCgs04/9rI
-            sQHdmpYd1ejvRM7pVUrUvXFEilWxCtwU4JnSH5IlJ+43srgC2vmlIld8/oyghwc3
-            9KeN1iFabBcnbqvxdL0WCfEipFJh0gI0WeM9N+t0MahbAm2MGIkj9ZMJ9O+XZX0P
-            MgoHvfRnkFrSYadTzXX9/gF0N8GGayY/AVgcFFJIn1HFyxoB1gHP5F5/GV8YVpWP
-            W5o/v5NKYmS22LJQNdFNCgUtjjrdmeeP5SIOCDTytJEahWtlZE4xgmIfHMlbS9fX
-            c+/pSAakV9Nz39EDUUlMAyj9uoEuE0RDaSRIIzOEvVJmCy40cczpbux4vRE55CBb
-            Kpj4IW3NnRavXucVt/gtSp+jz8IEpxGjTbgAMxtTi88XZkE2mjDjH0wXGm3Cdr8E
-            +cG01WXKZnV+Rw3EEthyg9A3Yhl2dCXa+9xeuIbM7R5Ay+VUmkcuhrPxhyCMA5OT
-            +1StnHTwC2qTJnhfrgnEsRAetu/q0wGrWVj7+/2sfLgABuqqByX9l3N3mRyLG3ZK
-            HUwPYoHis00J88P2h/5q/Fg9QB6ShsOhv3kvGpr5y3vBpQ9aAwdJcg6fdSzvqNRo
-            AQkCEJL1gcVBMb6aiPKDqR1QRH6pNh7qHm9DFem7xd+5CcgF11ONq8/vlAY86ENo
-            SRqFBVYU+00cpzF+yE589J2h3PvNLpO/u2C9J5rrmmvTp9WRnvJnzW+Y521ZPQAJ
-            XrZhPjnaDkE=
-            =P5CG
+            hQIMAyqlIeyoxYovARAAyPqbpe2mT3Ki6HURqq4VS35Yt8fmx1acasEtvBNCUVat
+            8Oj3LEvjYvvtBC7LY5msI4HZJnbSoUExPMKR0j1HB1pX/SB8MIjpIQpS8SvnJEnS
+            B9Mws5F5QzGEQDWg8d/wVia8LaEDehtPXeTx3FZVjfJCMVi7SS61ymg5vbZI0toR
+            mCmNh1QkD7lGYPyKfKXjDzM+m6dPf0NYj1etMRxaV3yEsFaOo5P8oi1ewzY4xr5/
+            jISkL01xfupeqJSiVnuYXgSDbnKj14hA7DAbsQYsqTevCRVeickmdS6yF7GICOrJ
+            gqo88b/Aju9gU+6pzaoZCHm5GAszHouUqTWukICPqAIChRKrQRF8eaj22q/+PBS4
+            3/BzHaRNuZvh2PElshj96dlw2f9hhpkYkbZBElMYidlEe1iRalqWmKBaCYDdoHkc
+            x7vBNtYxkwwUUMz+NIGZPYtyeS/1k9rx+UErad6XDir1/jJK6ICzmYwDJydFRVmR
+            pwzhsmyDdrTRhK0wvClO/QBc55ZYnGa3ecKRC7Sxb2qYsCZzgABnuRAavdmzf4F+
+            WoHubjO4vYUswoaV14r5tO3HgS9JkRDzPfK9BfhyeE/9XfUfkNdYVMw4oP/uFkJw
+            aTtVmy9txhsTAQ7yCRKsnA9Itnmu8IQfYYU0MwLK9p93ABORmhpEbzZO5pW/l22F
+            AgwDXjg0p2IN1X8BEACQPAKN0TVUzxykhMW1f57HqHfMzNZog9K541Sj9sbyd2fQ
+            24Z+UX6IZ1I9VOZmRY9ffTjZTG+MUa1jSk6A9BMb9s5c5+PH2bzFxpXcSWf6QNyK
+            tY3MmW2jLxqqYfUv/ZnhbfPK4P2846HpkVVZX/lmT4JuHa4t8UFrEeBmWbJfbnL0
+            Fcu7TDVmf2+z4ArevFUPSCL/ALluYiMqASqvw9acYR7vIjoyjA2o91usOF2Q4oO+
+            QmhaDCm08fvftUDJWCKKmFK49s5jiVr6Fy6E0QUZB2zcaCv6VoTJzxVhCCi2J6rQ
+            fVCG1s6k+QVMTQxsIBQM7jmU7XdVPb+hSTFbY6kmn0ijhqLt3n0/JVZKz2y80Mti
+            RYQXvIlKL2lBYy7Fz30TWLoGTmGW1SHS3WmuMv/VPB7o1iqmmjTcgkaHWEiIav5s
+            j7gLBytITp+yyVm5CBtSMhS0J9gaC90vesjYBNryFRhszTZuO3VzgKspvWf+dIQS
+            ATn64C2XcjIhw6BmAzlaGcieoJrtmi/+ukCyM7Ri2l/WlImUBAKUvIsd5M7PzrRK
+            R2dV+saJIb6VoKAXerh9oIvFUPCFqTRqCauRUTTSp35u6kilnKRDy0USiRvQ8owr
+            NUuT3ZKRNaGISgzhxCOULGKCcOUxv9A51UF6dlwNLWgKp3oVqKZqW6ZJkdE76NRo
+            AQkCEDi0uiaPJsm+SJ2PyYSTxKEkWIY9kW6OwZ3kAk8Vn0QeNiojLok8kOGs55vE
+            jlVBnm0tFjALwAfy6H0EOvZcolOdq3+E7j1abgR+yC5RaorwR4rkslpYHsBs9J8Z
+            DYAMMrBG2A0=
+            =wybq
            -----END PGP MESSAGE-----
          fp: BD1AAF9D8170F4BEE437365FF6F0933799CFEBCD
-        - created_at: "2024-10-18T23:02:46Z"
+        - created_at: "2024-08-03T21:27:12Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMAwAAAAAAAAAAAQ//W/yyW7xw283FVjRldWn0DcdYmU59yL4qxFyuWWRfFTng
-            kfGc+9DkPdCBwWKQsRzc3sm8b4hU6dRL2BTRysUwc2V6QDkjGZsR/jhpBtNjB9y3
-            FbyB3KKyCOl89ADJBY+WgBuqUlHdlqyTlPDCNIQfFngiFGNQd3LZ/6fToo8ZeA3A
-            jLQA/ZB4t0umccc1O2tyG6j5/UjtSyfUrHyMahDEZ9umwsJ/xmTxT/cHVJA3tYr6
-            WAo2ZD9qJxB8knYM175E9g+4I1ZI8xrTDuXOecxXW4zLELH0RyPxNkAwCGI2L+fH
-            7CZvgxRjmsgGXK7Y7fg4mj4YLqkKkuiReUIU4DACdkVlKHTD+rkHynnOJGqn7FYA
-            D107J94rZpXZTsbpu+Sp93fzbac4tmSZmXDcfY5aYQ9hdvX+/MkInfmcpMVoYmIm
-            2xghVNii1MUqaGtvsLgXdbIGoCH6ylQA6eCWOjBISFkGgzQQKykV7PxA7QjluY35
-            0+vJfHCHriqee6KTJVGoKfgFswZYGsD/tfV4llQLQg8gmdBblBWizEp4JhRI0ZUn
-            iC5AJ9KJAmDImS/tS1hmlFBrWOFSm5NkfwYBZ8A9lKnfX7TcY1Cx5ixeNjKOHINr
-            zyhDvVgokewAc8/ggI0yE7QS4ekaeYcp9ezycSlL5/aUaNgf4EGBI/p3yG7Xwa/U
-            aAEJAhBONeevknrsrKbLCNpr1qIfR49r22EFRNTkk9HKbrau9VZTG7eQRZN1UglG
-            btfE/KdfUcz5+YnroPF3Dc5Qpjwzzi4SYLUgOwITBvzOfxkRg2MWqlUza5C+Qjgm
-            ueCa0/OcMKbb
-            =FxSv
+            hQIMAy5t8IMoPu4VARAAhMkGlwiYmzonAe4DD9dOn0GkD97bR7fhq9Un+EAjJx73
+            F7KAP35VdYoa2iZT1Zbv0IJSBcqKfSgaWMpPqzJNq5FKqvYdyytAV/CSybgODtn0
+            zZUfLsPu8C1yD7e4TiJcL2ABlll5yU/HwYBJm4rqEl0TO/ogXd4Tj05aDRkYtiDz
+            TLLgmNEeq9Z35ir/8Od8WtdjhCVq9RRe2NnE+PT2B+EbT5GFq2kYCxUbdRP8FjFA
+            81RXxbRGm4coBt6ReGBaMr38PTI7wPcJ8JqecAyuX4jjMn8CWi3DIIlHz9cTmyFo
+            HLpdM7K8iYGvTk0LJMQHlUbPSvXLlBUk/WXHZyTR2cmiS3mzVKA/zffNjCpUIAF6
+            8EsyKBfXxMKT28q9d8D/rWrAMHjKYlEL0QxCdw036FN6mwn4d4auDG56FC71+FvG
+            wOJxbuviOgok6NZfWKqx0IGXcOQMcL/bCkRtdiUux4WVyj8OgJZJ74gqgK5LEDzD
+            lg3vHQYMqD45i3ig8rfhiK4fKOAIa4QDNXbyWqt9oCh3OwBnNSte2hc9b3szrSqN
+            g0X3eDwuI2EA1qc+Y4PJuz0fXWZBDT39AA99Ruv7v4BvnzvC8DaUlebL7Ky4/dnp
+            279MToEiE8yFGx4GVhNKR1jSez7I+UoalIkq3vvW91jZIeE790EGxrkT1Gp6lITU
+            aAEJAhDyOpEoEYc0/XA8uq9BY9bNUshm9ZVS1Kg00im0LE4jxLG0n2Nr2k1NNlv2
+            tF/5bV0D3CCSzc6CVUSqlvBJ18XYw1gpCuBJsY1ylU8IKbZEXNuwCsJJNleSCsQJ
+            8mGx07XqhVal
+            =aq7o
            -----END PGP MESSAGE-----
          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
    encrypted_regex: ^(data|stringData)$
-    version: 3.9.1
+    version: 3.8.1
--- a/kubernetes/main/apps/authentik/app/helm-release.yaml
+++ b/kubernetes/main/apps/authentik/app/helm-release.yaml
@ -11,7 +11,7 @@ spec:
  chart:
    spec:
      chart: authentik
-      version: 2024.10.0
+      version: 2024.8.3
      sourceRef:
        kind: HelmRepository
        name: authentik-charts
--- a/kubernetes/main/apps/database/mysql/helm-release.yaml
+++ b/kubernetes/main/apps/database/mysql/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: mysql
-      version: 11.1.19
+      version: 11.1.17
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts
--- a/kubernetes/main/apps/database/postgresql/app/helm-release.yaml
+++ b/kubernetes/main/apps/database/postgresql/app/helm-release.yaml
@ -10,7 +10,7 @@ spec:
  chart:
    spec:
      chart: cloudnative-pg
-      version: 0.22.1
+      version: 0.22.0
      sourceRef:
        kind: HelmRepository
        name: cloudnative-pg
--- a/kubernetes/main/apps/database/redis/helm-release.yaml
+++ b/kubernetes/main/apps/database/redis/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: redis
-      version: 20.2.x
+      version: 20.1.x
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts
--- a/kubernetes/main/apps/default/ganymede/helm-release.yaml
+++ b/kubernetes/main/apps/default/ganymede/helm-release.yaml
@ -122,7 +122,7 @@ spec:
          nginx:
            image:
              repository: nginxinc/nginx-unprivileged
-              tag: 1.27.2-alpine
+              tag: 1.27.1-alpine

            securityContext:
              allowPrivilegeEscalation: false
--- a/kubernetes/main/apps/default/mealie/app/helm-release.yaml
+++ b/kubernetes/main/apps/default/mealie/app/helm-release.yaml
@ -30,7 +30,7 @@ spec:
          main:
            image:
              repository: ghcr.io/mealie-recipes/mealie
-              tag: v2.1.0
+              tag: v1.12.0

            env:
              ALLOW_SIGNUP: true
--- a/kubernetes/main/apps/default/piwigo/app/helm-release.yaml
+++ b/kubernetes/main/apps/default/piwigo/app/helm-release.yaml
@ -30,7 +30,7 @@ spec:
          main:
            image:
              repository: lscr.io/linuxserver/piwigo
-              tag: 15.0.0
+              tag: 14.5.0

            env:
              PUID: 9000
--- a/kubernetes/main/apps/default/well-known-site/helm-release.yaml
+++ b/kubernetes/main/apps/default/well-known-site/helm-release.yaml
@ -23,7 +23,7 @@ spec:
          main:
            image:
              repository: nginxinc/nginx-unprivileged
-              tag: 1.27.2-alpine
+              tag: 1.27.1-alpine

    service:
      app:
--- a/kubernetes/main/apps/download/prowlarr/helm-release.yaml
+++ b/kubernetes/main/apps/download/prowlarr/helm-release.yaml
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/prowlarr-develop
-      tag: "1.25.4.4818"
+      tag: "1.24.3.4754"

    # Metrics sidecar
    sidecars:
--- a/kubernetes/main/apps/download/qbit-manage/helm-release.yaml
+++ b/kubernetes/main/apps/download/qbit-manage/helm-release.yaml
@ -35,7 +35,7 @@ spec:

    image:
      repository: bobokun/qbit_manage
-      tag: "v4.1.12"
+      tag: "v4.1.10"

    env:
      QBT_STARTUP_DELAY: 45 # seconds
--- a/kubernetes/main/apps/download/radarr/app/helm-release.yaml
+++ b/kubernetes/main/apps/download/radarr/app/helm-release.yaml
@ -35,7 +35,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/radarr-develop
-              tag: 5.14.0.9383
+              tag: 5.12.0.9255
            envFrom: *envFrom
            env:
              TZ: America/New_York
--- a/kubernetes/main/apps/download/sonarr/app/helm-release.yaml
+++ b/kubernetes/main/apps/download/sonarr/app/helm-release.yaml
@ -35,7 +35,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/sonarr-develop
-              tag: 4.0.10.2579
+              tag: 4.0.9.2457
            envFrom: *envFrom
            env:
              TZ: America/New_York
--- a/kubernetes/main/apps/game-servers/factorio/helm-release.yaml
+++ b/kubernetes/main/apps/game-servers/factorio/helm-release.yaml
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: goofball222/factorio
-      tag: "2.0.13"
+      tag: "1.1.110"

    service:
      main:
--- a/kubernetes/main/apps/media/audiobookshelf/helm-release.yaml
+++ b/kubernetes/main/apps/media/audiobookshelf/helm-release.yaml
@ -23,7 +23,7 @@ spec:
          main:
            image:
              repository: ghcr.io/advplyr/audiobookshelf
-              tag: 2.16.2
+              tag: 2.13.4

    service:
      app:
--- a/kubernetes/main/apps/media/jellyfin/helm-release.yaml
+++ b/kubernetes/main/apps/media/jellyfin/helm-release.yaml
@ -22,7 +22,7 @@ spec:
          app:
            image:
              repository: linuxserver/jellyfin
-              tag: 10.10.0
+              tag: 10.9.11
            
            env:
              PUID: 10000
--- a/kubernetes/main/apps/media/komga/helm-release.yaml
+++ b/kubernetes/main/apps/media/komga/helm-release.yaml
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: gotson/komga
-      tag: "1.14.1"
+      tag: "1.14.0"

    env:
      TZ: America/New_York
--- a/kubernetes/main/apps/media/tautulli/helm-release.yaml
+++ b/kubernetes/main/apps/media/tautulli/helm-release.yaml
@ -18,7 +18,7 @@ spec:

    image:
      repository: ghcr.io/onedr0p/tautulli
-      tag: 2.14.6@sha256:267de8bb88e82d9814e9374b0cc847d771cb83a4c5296e4bc083ab6fbac60a22
+      tag: 2.13.4@sha256:633a57b2f8634feb67811064ec3fa52f40a70641be927fdfda6f5d91ebbd5d73

    env:
      TZ: "America/New_York"
--- a/kubernetes/main/apps/monitoring/external-monitors/essential-node-exporter.yaml
+++ b/kubernetes/main/apps/monitoring/external-monitors/essential-node-exporter.yaml
@ -19,7 +19,7 @@ metadata:
  namespace: monitoring
 subsets:
 - addresses:
-  - ip: 192.168.10.42
+  - ip: 192.168.10.41
  ports:
  - name: metrics
    port: 9100
--- a/kubernetes/main/apps/monitoring/external-monitors/kustomization.yaml
+++ b/kubernetes/main/apps/monitoring/external-monitors/kustomization.yaml
@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-#- ./air-quality.yaml
-#- ./air-quality-dashboard.yaml
+- ./air-quality.yaml
+- ./air-quality-dashboard.yaml
 - ./essential-node-exporter.yaml
--- a/kubernetes/main/apps/monitoring/grafana/helm-release.yaml
+++ b/kubernetes/main/apps/monitoring/grafana/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: grafana
-      version: "8.5.11"
+      version: "8.5.2"
      sourceRef:
        kind: HelmRepository
        name: grafana-charts
--- a/kubernetes/main/apps/monitoring/kube-prometheus-stack/helm-release.yaml
+++ b/kubernetes/main/apps/monitoring/kube-prometheus-stack/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: kube-prometheus-stack
-      version: "65.5.1"
+      version: "64.0.0"
      sourceRef:
        kind: HelmRepository
        name: prometheus-community-charts
--- a/kubernetes/main/apps/monitoring/kustomization.yaml
+++ b/kubernetes/main/apps/monitoring/kustomization.yaml
@ -10,5 +10,5 @@ resources:
 - ./victoria-metrics
 - ./varken
 - ./proxmoxve-exporter
- ./external-monitors
+#- ./external-monitors
 - ./flux
--- a/kubernetes/main/apps/monitoring/victoria-metrics/helm-release.yaml
+++ b/kubernetes/main/apps/monitoring/victoria-metrics/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: victoria-metrics-single
-      version: 0.12.3
+      version: 0.11.2
      sourceRef:
        kind: HelmRepository
        name: victoria-metrics-charts
--- a/kubernetes/main/apps/tools/kustomization.yaml
+++ b/kubernetes/main/apps/tools/kustomization.yaml
@ -4,6 +4,6 @@ resources:
 - ./namespace.yaml
 #- ./network_policy.yaml
 - ./transfersh
- ./vaultwarden/ks.yaml
+- ./vaultwarden
 - ./hastebin
 - ./gotify
--- a/kubernetes/main/apps/tools/vaultwarden/app/helm-release.yaml
+++ b/kubernetes/main/apps/tools/vaultwarden/app/helm-release.yaml
@ -2,6 +2,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
  name: vaultwarden
+  namespace: tools
 spec:
  interval: 5m
  chart:
@ -16,7 +17,7 @@ spec:
  values:
    image:
      repository: vaultwarden/server
-      tag: 1.32.3
+      tag: "1.32.0"

    service:
      main:
@ -45,14 +46,10 @@ spec:

    persistence:
      data:
-        existingClaim: vaultwarden
-        globalMounts:
-          - path: /data
-      # data:
-        # enabled: true
-        # type: hostPath
-        # hostPath: /mnt/MainPool/Kubernetes/vaultwarden
-        # mountPath: /data
+        enabled: true
+        type: hostPath
+        hostPath: /mnt/MainPool/Kubernetes/vaultwarden
+        mountPath: /data

    resources:
      requests:
--- a/kubernetes/main/apps/tools/vaultwarden/ks.yaml
+++ b/kubernetes/main/apps/tools/vaultwarden/ks.yaml
@ -1,32 +0,0 @@
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: &app vaultwarden
-  namespace: flux-system
-spec:
-  timeout: 5m
-  interval: 10m
-  targetNamespace: tools
-  path: ./kubernetes/main/apps/tools/vaultwarden
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: home-cluster
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-gpg
-  dependsOn:
-    - name: openebs
-    - name: openebs-sc
-    - name: volsync
-  postBuild:
-    substituteFrom:
-      - kind: ConfigMap
-        name: cluster-settings
-      - kind: Secret
-        name: cluster-secrets
-    substitute:
-      APP: *app
-      VOLSYNC_CAPACITY: 5Gi
--- a/kubernetes/main/apps/tools/vaultwarden/app/kustomization.yaml
+++ b/kubernetes/main/apps/tools/vaultwarden/app/kustomization.yaml
@ -1,5 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
- ../../../../../common/templates/volsync
 - ./helm-release.yaml
--- a/kubernetes/main/core/longhorn/helm-release.yaml
+++ b/kubernetes/main/core/longhorn/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: longhorn
-      version: "1.7.2"
+      version: "1.7.1"
      sourceRef:
        kind: HelmRepository
        name: longhorn-charts
--- a/kubernetes/main/core/traefik/app/helm-release.yaml
+++ b/kubernetes/main/core/traefik/app/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: traefik
-      version: '33.0.0'
+      version: '32.0.0'
      sourceRef:
        kind: HelmRepository
        name: traefik-charts
--- a/kubernetes/main/crds/traefik/crds.yaml
+++ b/kubernetes/main/crds/traefik/crds.yaml
@ -9,7 +9,7 @@ spec:
  url: https://github.com/traefik/traefik-helm-chart.git
  ref:
    # renovate: registryUrl=https://helm.traefik.io/traefik chart=traefik
-    tag: v33.0.0
+    tag: v32.0.0
  ignore: |
    # exclude all
    /*
--- a/kubernetes/thin/apps/database/postgresql/app/pgadmin4/helm-release.yaml
+++ b/kubernetes/thin/apps/database/postgresql/app/pgadmin4/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: pgadmin4
-      version: "1.31.0"
+      version: "1.28.0"
      sourceRef:
        kind: HelmRepository
        name: runix-charts
--- a/kubernetes/thin/apps/database/redis/app/helm-release.yaml
+++ b/kubernetes/thin/apps/database/redis/app/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: redis
-      version: 20.2.1
+      version: 20.1.6
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts
--- a/kubernetes/thin/apps/default/home-assistant/files/helm-release.yaml
+++ b/kubernetes/thin/apps/default/home-assistant/files/helm-release.yaml
@ -24,7 +24,7 @@ spec:
          app:
            image:
              repository: ghcr.io/onedr0p/home-assistant
-              tag: 2024.10.4
+              tag: 2024.9.3
            env:
              TZ: America/New_York #${SERVER_TIMEZONE}
              HASS_HTTP_TRUSTED_PROXY_1: 192.168.0.0/16
--- a/kubernetes/thin/apps/default/nextcloud/files/helm-release.yaml
+++ b/kubernetes/thin/apps/default/nextcloud/files/helm-release.yaml
@ -23,7 +23,7 @@ spec:
          nextcloud:
            image:
              repository: nextcloud
-              tag: 30.0.1
+              tag: 30.0.0

            envFrom:
              - secretRef:
--- a/kubernetes/thin/apps/kube-system/cilium/app/helm-release.yaml
+++ b/kubernetes/thin/apps/kube-system/cilium/app/helm-release.yaml
@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: cilium
-      version: 1.16.3
+      version: 1.16.2
      sourceRef:
        kind: HelmRepository
        name: cilium
--- a/kubernetes/thin/apps/monitoring/grafana/app/helm-release.yaml
+++ b/kubernetes/thin/apps/monitoring/grafana/app/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: grafana
-      version: "8.5.11"
+      version: "8.5.2"
      sourceRef:
        kind: HelmRepository
        name: grafana
--- a/kubernetes/thin/apps/monitoring/kube-prometheus-stack/app/helm-release.yaml
+++ b/kubernetes/thin/apps/monitoring/kube-prometheus-stack/app/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: kube-prometheus-stack
-      version: "65.5.1"
+      version: "64.0.0"
      sourceRef:
        kind: HelmRepository
        name: prometheus-community
--- a/kubernetes/thin/apps/monitoring/victoria-metrics/operator/helm-release.yaml
+++ b/kubernetes/thin/apps/monitoring/victoria-metrics/operator/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: victoria-metrics-operator
-      version: 0.36.0
+      version: 0.35.2
      sourceRef:
        kind: HelmRepository
        name: victoria-metrics-charts
--- a/kubernetes/thin/apps/monitoring/victoria-metrics/vm/agent.yaml
+++ b/kubernetes/thin/apps/monitoring/victoria-metrics/vm/agent.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  image:
    repository: victoriametrics/vmagent
-    tag: v1.105.0
+    tag: v1.104.0
    pullPolicy: IfNotPresent
    
  selectAllByDefault: true
--- a/kubernetes/thin/apps/monitoring/victoria-metrics/vm/single.yaml
+++ b/kubernetes/thin/apps/monitoring/victoria-metrics/vm/single.yaml
@ -6,7 +6,7 @@ metadata:
 spec:
  image:
    repository: victoriametrics/victoria-metrics
-    tag: v1.105.0
+    tag: v1.104.0

  retentionPeriod: "6" # in months
  replicaCount: 1
--- a/kubernetes/thin/apps/nginx/external/helm-release.yaml
+++ b/kubernetes/thin/apps/nginx/external/helm-release.yaml
@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: ingress-nginx
-      version: 4.11.3
+      version: 4.11.2
      sourceRef:
        kind: HelmRepository
        name: ingress-nginx
--- a/kubernetes/thin/apps/nginx/internal/helm-release.yaml
+++ b/kubernetes/thin/apps/nginx/internal/helm-release.yaml
@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: ingress-nginx
-      version: 4.11.3
+      version: 4.11.2
      sourceRef:
        kind: HelmRepository
        name: ingress-nginx
--- a/kubernetes/thin/apps/traefik/app/files/helm-release.yaml
+++ b/kubernetes/thin/apps/traefik/app/files/helm-release.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: traefik
-      version: '33.0.0'
+      version: '32.0.0'
      sourceRef:
        kind: HelmRepository
        name: traefik-charts
--- a/kubernetes/thin/apps/traefik/app/files/internal-hr.yaml
+++ b/kubernetes/thin/apps/traefik/app/files/internal-hr.yaml
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: traefik
-      version: '33.0.0'
+      version: '32.0.0'
      sourceRef:
        kind: HelmRepository
        name: traefik-charts