2024-01-23 02:58:31 +00:00
73 changed files with 123 additions and 487 deletions
--- a/.github/renovate.json5
+++ b/.github/renovate.json5
@ -181,7 +181,11 @@
    {
      "matchDatasources": ["helm"],
      "addLabels": ["renovate/helm"]
-    }
+    },
+    {
+      "matchDatasources": ["github-releases", "github-tags"],
+      "addLabels": ["renovate/github-release"]
+    },
  ],
  // custom managers
  "customManagers": [
--- a/cluster/apps/authentik/helm-release.yaml
+++ b/cluster/apps/authentik/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: authentik
--- a/cluster/apps/authentik/kustomization.yaml
+++ b/cluster/apps/authentik/kustomization.yaml
@ -9,4 +9,3 @@ resources:
 - ./traefik-middleware.yaml
 - ./dashboard.yaml
 - ./service-monitor.yaml
-#- ./ldap-outpost
--- a/cluster/apps/authentik/ldap-outpost/helm-release.yaml
+++ b/cluster/apps/authentik/ldap-outpost/helm-release.yaml
@ -1,70 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: authentik-ldap
-  namespace: authentik
-spec:
-  interval: 5m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.3.x
-      sourceRef:
-        kind: HelmRepository
-        name: bjws-charts
-        namespace: flux-system
-
-  values:
-    image:
-      repository: ghcr.io/goauthentik/ldap
-      tag: "2023.6.1"
-
-    env:
-      AUTHENTIK_HOST: "http://authentik.authentik:80"
-      AUTHENTIK_INSECURE: "true"
-      AUTHENTIK_HOST_BROWSER: "https://auth.${SECRET_DOMAIN}"
-
-    envFrom:
-      # Sets AUTHENTIK_TOKEN
-      - secretRef:
-          name: ldap-authentik-secret
-
-    service:
-      main:
-        enabled: true
-        ports:
-          # Disable http port
-          http:
-            enabled: false
-
-          ldap:
-            enabled: true
-            primary: true
-            port: 3389
-            targetPort: 389
-            protocol: TCP
-
-          ldaps:
-            enabled: true
-            primary: false
-            port: 6636
-            targetPort: 636
-            protocol: TCP
-
-    probes:
-      liveness:
-        enabled: false
-      startup:
-        enabled: false
-
-    ingress:
-      main:
-        enabled: false
-
-    resources:
-      requests:
-        cpu: 2m
-        memory: 80Mi
-
-      limits:
-        memory: 500Mi
--- a/cluster/apps/authentik/ldap-outpost/kustomization.yaml
+++ b/cluster/apps/authentik/ldap-outpost/kustomization.yaml
@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
- ./ldap-secret.sops.yaml
- ./helm-release.yaml
--- a/cluster/apps/authentik/ldap-outpost/ldap-secret.sops.yaml
+++ b/cluster/apps/authentik/ldap-outpost/ldap-secret.sops.yaml
@ -1,60 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: ldap-authentik-secret
-    namespace: authentik
-stringData:
-    AUTHENTIK_TOKEN: ENC[AES256_GCM,data:qBh9rgEbGBQj9yO1MVdtZtzdyhYdfTpsHUzeQd6RSDZsOEhRB2AMVXANoVh+EHeKnDdL6G4TQrsmIVZc,iv:0sFEKTyZOoR0IFGdroFCuyDBdPszqnlkYtV1nL+FCPE=,tag:bVc2MvsE0ePnBBfdc88Fqg==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2023-04-09T19:41:26Z"
-    mac: ENC[AES256_GCM,data:SV/xyF9z5exA50GG3WJtaaGLaQ4s4eojEWR/UoDOcx09QcDtuRxtS/O0QPptQh4BoF1STIR+JuG9Yod7buVaVtbH8RQ9KimBWIEKHR8kuRl1AAXJiX4/Sr3xyD3k52oM1BIBpLKu4Osw7uG/+7so2l/vEHPlS1g3188yW6ICqH8=,iv:EPltYcBP+j+9z6JTZgrp26JY+yAkamZwUhn7We+hesk=,tag:0iwERzh8mJtSOm78FSQ9Ag==,type:str]
-    pgp:
-        - created_at: "2023-06-19T18:35:37Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAzKleRwoSoixARAAnO7KxtJ9tnguhyxu5oSa9HsLsxsxldLjSfMk4nutZfDo
-            vpreFt/KjSrlyTlCro1zIjhZvJGnWaz52FrwTAO8rk/2imId+2V3xyU5Ng2XnQbS
-            +neRZs/jtfMpUNfux/sGXDtBFp01eAzsu2+PqAVXzlZC8nk+WdBGmwGJSUNxKZ3B
-            e0WSFV54Y9j84Zn/4u8bTk2EVth33fY7jQk9gXUH6bxCgWGQS+kZDoxcxiZRd2lF
-            svDfZbefgvTCDMxOIUweA2s4KHwIzhh3fuRRx4hRcTM5dnu/SKHp3dIBLCO/XpOe
-            Ik5VziwKy4GptbxkNfeBSupIcg+ydzEHB8bffW3hx7ZZi6aXZ0YosrUoEczgo7Sq
-            SdFCX139GCm7sCAHFMNe942smnVs/8+lOoFyR/nJ9FtlIWlTQ/tORHHNDyLz12mI
-            7wyRaFSj0+W6XQBFg/Uc0TzNVsU4L5aTKdWz9Xcto7aE4Kwi93ZVFKGSfKmTCeWR
-            7K8/Ghj6majNUPz2TAB//9Jc30QgN+eRbzcSFA40Kwjs71JzcthiSo8OFPJEQox4
-            I5VIHdaxxLIzvCZDZ89Qe8KYHps9sge2/BMP70wSm6i00zuA3EO1cArJchIBtXLB
-            ZtBrCSKRwkatflNTriPCNUIRkn4YUkcVJtlHbamBAK/G3kzE99i137MFf8A2GhvU
-            aAEJAhCgx8blQrlhpPudkC024dlBhTtHI+xhAu8p/6ONvoCKLxcUlCmGcVOgN0z6
-            vG2CVtzzhNBMqSgzBxNzH5e0KdzZTp7dMxxcMHm1deKrQO+B2bpc6ekzMe2fliK0
-            0wr5Pf79W0JA
-            =CYbO
-            -----END PGP MESSAGE-----
-          fp: 2CC2B3631D5C3393901335DB68F95C5D753EE1E5
-        - created_at: "2023-06-19T18:35:37Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy5t8IMoPu4VARAAkdm5dbHYnPRwvjz72mxFIKDUtExXofUeOvMLAeiO3AKg
-            aoa0TnA8YeuWNYLTsAyPCHxuAmkdqwIfKaOgukLMWYA2PkkjrCXdDhS+w/eAIARU
-            TGDuZaChXgkGPCcupzbanuerIBoJmeyOIRqBtwYLiuOytgZDpoYargMWERMXDCr9
-            otUk/o6z01yoE+cvZgcGdzg3MbcVURLA7PbG8lAuB5sWMeF8hSaV/aWI4dwPRv6V
-            k2YsOIPhApIEcOEVsIziFFhFMVjeTEYnkyY7gYkRi8Z1+TEgI2LZLf+6EFurG4pW
-            KpjK0/NcsuRI48gHwpGYK4fS3GeblsJ4CzklzphZoZ4NsdqHQ5kLV7p8Jf6b9IBf
-            qVqdfrsys4ghoKXVbHK4l3tF3n9WIdKGW/dvaIYcphbPDlWaFnaeElBECJI81DxK
-            Xglu25fWYB0FdYLAbHJ9b54fXbrabKoBHUg6CFPl20J7eg7gwds49HXZngwqSwV7
-            2Hd4cIV/PcLcwpZN9RWVSUsqQAiutZb5zNV3CWfjNLozOWJ6QhY1YUbMvp/tgkZJ
-            97Rq8fjket/21u/cuABjbVMReO00JvSskvXCjFJhpTFzmQABVKNjvbVESzIiI64w
-            KWGcKrgoj5ZQQsAUfBgd68Xw5kp3NdQOSC5nfFgMcUeq1wNZckbPRTj+LZPLDjzU
-            aAEJAhA9lvevq5PKjNBKraWlxIosWyI+SFlJ6KBHpFZWJBKNcz9v796Hne0VtKyP
-            gY/8pAnBwWZqMxCBvTlIZXMCf0JjqfzCXXmbUttCl0fPUI7AEJPm0o+P7oL3SMlI
-            Sk7B5aX752Xe
-            =vnTM
-            -----END PGP MESSAGE-----
-          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
-    encrypted_regex: ^(data|stringData)$
-    version: 3.7.3
--- a/cluster/apps/database/mariadb/helm-release.yaml
+++ b/cluster/apps/database/mariadb/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: mariadb
--- a/cluster/apps/database/minio/helm-release.yaml
+++ b/cluster/apps/database/minio/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: minio
--- a/cluster/apps/database/postgresql/helm-release.yaml
+++ b/cluster/apps/database/postgresql/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: postgresql
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: postgresql
-      version: 12.2.x
+      version: 12.12.x
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts
--- a/cluster/apps/database/postgresql/pgadmin4/helm-release.yaml
+++ b/cluster/apps/database/postgresql/pgadmin4/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: pgadmin4
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: pgadmin4
-      version: "1.18.2"
+      version: "1.23.1"
      sourceRef:
        kind: HelmRepository
        name: runix-charts
--- a/cluster/apps/database/redis/helm-release.yaml
+++ b/cluster/apps/database/redis/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: redis
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: redis
-      version: 17.9.x
+      version: 17.17.x
      sourceRef:
        kind: HelmRepository
        name: bitnami-charts
--- a/cluster/apps/default/cdn/helm-release.yaml
+++ b/cluster/apps/default/cdn/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: nginx-cdn
--- a/cluster/apps/default/dendron/helm-release.yaml
+++ b/cluster/apps/default/dendron/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: dendron
--- a/cluster/apps/default/fireflyiii/helm-release.yaml
+++ b/cluster/apps/default/fireflyiii/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: firefly-iii
--- a/cluster/apps/default/gitea/gitea-secret.sops.yaml
+++ b/cluster/apps/default/gitea/gitea-secret.sops.yaml
@ -1,64 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: gitea-secret
-    namespace: default
-stringData:
-    GITEA__database__DB_TYPE: ENC[AES256_GCM,data:CxKLDkwWDro=,iv:vMzk5XUyeiUog3uaNWQi3YKOpnhUTUbZLWi8aQe1GOI=,tag:cIa3sjnmZZeqf8RkHaHyCA==,type:str]
-    GITEA__database__HOST: ENC[AES256_GCM,data:SPy0h0kvhTMzbx7IhmOrOZ2RfVF0h2E4,iv:YvrmhhZfPGzjuuppfBumrKjQzGAwmScZ4Kv88bTRTa4=,tag:xnrGbDv0XwhYrCeJ3l+Cvg==,type:str]
-    GITEA__database__NAME: ENC[AES256_GCM,data:K1lM4P8=,iv:5sN41GkSZ4sPLwIyVjiy6JNm20WFq3qNYFZ1gWfqG/4=,tag:hBoBRIgae5QRoMirGgEWmg==,type:str]
-    GITEA__database__USER: ENC[AES256_GCM,data:aQvMk8Y=,iv:SaDZ5fWWbhu66BqYJ+KKs6/zMrdTDoDZvBQKd2IyLck=,tag:4z7jRIT158aUxaOmYWewAQ==,type:str]
-    GITEA__database__PASSWD: ENC[AES256_GCM,data:n6ywTKo/Eb8JU9/MBvwlbLxcPJp1VRRrMKniktMZjS4=,iv:c7DSl3ReYNWoRN2TPeGkxIUo/OXz7EtKr416nBtFUxA=,tag:zEf7GhN3RNkfbSn13WA1Yg==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2023-04-27T23:49:11Z"
-    mac: ENC[AES256_GCM,data:tAs7ev9V8nwDlpUeYC6D79gpT2IztnIppycM3GSmiLwock9XrJilAyaahd+OdmLQXjEqqqOZjLKVCm67xf+3jiPFkmCsIfP9A0incrySEJBVsum9/7i3nbUTf2tJyhj7mlex33KG3Arsinx3oPfY1U5QykYBBLR6dEan69Vg6Fc=,iv:IrrJnQgpyGW6B2Nu2IKetT279/WRDU9yG/A6r+5gtXo=,tag:ZXdVSvVsP3IJECSCguSdVw==,type:str]
-    pgp:
-        - created_at: "2023-06-19T18:36:04Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAzKleRwoSoixARAAgNVBrn+y64VuYMkJBTyBQBE3REx7MR+OlX1Rw8gSsyIf
-            A9sSQsNEGuiOVAovuoDbz5uOCEcu6FBh1i17NEQj1f4VYQJ4W2f3+SFkRqfXmXgJ
-            CEW4Ho5M4q30Lztp+8qy4coP6we7KkiFrVdyfWhFhI+J27D4VBpmlRszdDzjKSWn
-            iQ9EYIxSbTnTZlo/79XNB5vmb/JIQz6K7PKjd2X16VJNp/Q6iIJ4pYFD9F0qsnTJ
-            lfeo38cuKYkbx026hg91uTJKRnoKtpJVFmcvZ206/4o3ACp6pMbOMMREq273aFfn
-            c/da8+rpTzK9h2oSLRJA8Xeo8Ki/40VxVerKhxzEFeeV+SGXHSW8wn9hjbq1PFrd
-            9CM15YGBE7ikgllbW87SbcN870Zfo9O8aNSrLFtVYkBVNQGBuJ8WKKLGaHYY9LMl
-            9jBBaNRQG0vKCZ+72cDVLNa+M0U7IU8PO/G05ksHZUFPGLOXIV+k8hzFbcQ+Xy+l
-            2ofNe6v6PDG3kI6V3epizzR4x+zXF4LOKZe124PuQTLnuaAEUQzZfMGHHr9QsAae
-            PmaM9BWZ39pwKETWIDnuYwI5gdJdIBQjNIpCo13qZBk85k36RhoY/TO9Gs6iCyot
-            qXY6TraqnL5o1pda8gDBdl5PvB1A9K0bYF/KZYG3tVz0oFb+3QPNkJ2ThNqwji/U
-            aAEJAhCF1XMZ7b7KXIiArVZU0aWlr1ft+nHLNjQHaj6+8F6trh+Zz3acnvk8YLaK
-            7RweedA8WMtRJY2gRpZaPU6XVLt8IZmnKGSDoAf0mi6+9oCttadxz7Mp1Cvd3sgX
-            ahD5a4xk5FiZ
-            =6Lqx
-            -----END PGP MESSAGE-----
-          fp: 2CC2B3631D5C3393901335DB68F95C5D753EE1E5
-        - created_at: "2023-06-19T18:36:04Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy5t8IMoPu4VARAAir4hbzyy5fcgrdFcTPcI6uyVRoETFz7VfSdo6pl6zOYc
-            ZYSDO8F+Hg5PBCHbE6LrTf1lMXtRKTOI4sIXGisACd7xdfDXvdvmBTuntovpk10L
-            4uj/umXjxOZVUyQ6642EU6FgxfNYKBOSR2lXoKtXh76GWOBPQ6uKF1VAW0MzFiXq
-            OFgt4U4KqTQoBdb4h8or+z1Yvp9U0hY1JDOUVzT6ymXxzjvjNcRLFpYxbaWynkG/
-            n1NkjY7nMxaDwcZowDfinNOD9VeIvZXthYr3eFuRzxHB8vKZlBLce4YpUL7lT56V
-            VQxt5h9gNJiXevuKUrLB9rnEPUBIqhf5RNH+qa/w7c4VaQlGj6p0Ns6giS+mIjYX
-            6h0yImGLnwCAbLgotVrUlir6a6Qodbote8LKa4G5hIKkF+O6gKjWZ+R4aO0OEQv3
-            tnTptRdVHA0oDiVXJk/RrFQHR7xo24AFAs+OXoBmMUrl5YxigV+qmWG1fnCNj1/l
-            TOMIM2hd9Lbz5iS8TZwKfpoZY8BJQNcd1Wab7F1KboGAAnCRLezMKmVDRzOQ1GIu
-            tY9ub63JqwQ1LgDKaLxgyflixPj+1460Qw2wBK5bT529QZ5EMlUIucKlF1MPWo1t
-            NGRXYR+gI80bb+tq5KvItL6s8JfJYm7HcqslT7/mCepJqCMulGh31Yai6NR+lQrU
-            aAEJAhAPp1uMcNtvlDzZ5ETnOxY39UV7h7RmWXvl5JsfYWXD3E+8O2hY5Z3u8viD
-            K3g41eXvY6+d6qyRQEzrkdTVQVU3bjxxp5cbkSrVWlZa93CjYR4Kypbw2TJspDq/
-            CyoEhvxtdypD
-            =8bDx
-            -----END PGP MESSAGE-----
-          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
-    encrypted_regex: ^(data|stringData)$
-    version: 3.7.3
--- a/cluster/apps/default/gitea/gitea-sidecar-secret.sops.yaml
+++ b/cluster/apps/default/gitea/gitea-sidecar-secret.sops.yaml
@ -1,64 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: gitea-sidecar-secret
-    namespace: default
-stringData:
-    GITHUB_USERNAME: ENC[AES256_GCM,data:hf2VmtB4nmo=,iv:g6OflUpWClklphmVsGmNh0dmYWFmP75326yupzU2DFY=,tag:d7pmSAL9ND0V3BtkfTXmnQ==,type:str]
-    GITEA_URL: ENC[AES256_GCM,data:jqGmGnLfz7vwleKXOj1JNt2RdxgtrR9E,iv:QTTajHdzb9mtYY5xCiLzI09pIBE8Dtl7WAR0gB5yOwA=,tag:0KHQ4ezr7diAs7v04ZHPIg==,type:str]
-    GITEA_TOKEN: ENC[AES256_GCM,data:bHjjouHJeYgxE5iLZxeXCqubOj8U3oizxmWZThDj73e7DbLsMoPWOw==,iv:Uh9OGeAw5iuwqFDKB4/Q6xvck2nQWewBMbFoyv/9zPQ=,tag:2U+KD+0qY+iceVhhVNKXuQ==,type:str]
-    GITHUB_TOKEN: ENC[AES256_GCM,data:S5RVGUibveqUoj7mSf+4m9DtHxgd2ybifOkqJTsE1eDGOZwgpWrSZQ==,iv:GMqA/xAHFR5EAhYgnPaJfKVLtdVgtccbBa46g+RBOwI=,tag:fU17aUJC3dsj+aayNEs/zA==,type:str]
-    MIRROR_PRIVATE_REPOSITORIES: ENC[AES256_GCM,data:8ClWoA==,iv:g1N26o9upienKfmd9GPZq/1IvJsKDVsOkvQfU9xyf7E=,tag:C0LBixZWj2o4XJUjf3WX4A==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2023-06-04T16:03:26Z"
-    mac: ENC[AES256_GCM,data:ky6LUNwPWZrQAgQbdcLc9pFPDKuuHQHLT/t4825fzDKT8LZNwfTkr7tjcnrfxp3zt/btdGWDRI3hDL2IqfuccBfcVqofRSE9FnnYKsvGPuUxnxbmWYtO1VNIQ7j0mHWsivQnwoQGPjmHGqg34vaQvNeq+2F0VrnGCHCoSrT5dFw=,iv:BRpJxXVmHPPYVBPK3LX2xRrLlIWd9iKTkaJf/Wm79DI=,tag:rrn6DBaws6hYohE0ObWJ+Q==,type:str]
-    pgp:
-        - created_at: "2023-06-19T18:36:07Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAzKleRwoSoixARAAmXw7G2AAr7hRPYMsHwRjv54Vuj7G0fjiNB5cSRgFWgYx
-            0QmLx9yyWMXcXk8HDT0JUINtind1BkaSrmWFWR5BDt0zWBxl7aIBxbpVQX/ngro6
-            GBHoUcmg3mp9JquBhvPPfRFrZ6MeG9YBSlExevK/ibHxJH8KGTX1ZgUhXHt7SFct
-            a2wCU2d/8boN35hhnvuyHk9S7HtC83G+6aMboVJHtTV4XqtJQIkrifTkMfQZ/S/U
-            bxeHrf248GzCOIRkUuWKtLiMSC2eV+oJkcxrX218xZa7lEBL+Qr3StvtXEMoPiN4
-            h7qVmOHyXza6Z3Im+fDFtEVf/OiLDzISxgq373XQONRy5bYI0znTEldREnl6lY9W
-            GMnAdSBDMwyskKUOcpt8UfOM1Lgs77s7/BhfjU3bFHVoIZro090wceBSBKnD5s8Z
-            egHvJUBUcoij8hc6lJwS8HPpj/t0CVJu4p83Hzk71Swgtm3ZYkfops410c05VyoH
-            3JGFT+3dgH70zPqhkn7QHHpJq05dVgZyZq0iG9FRb3qZ/zG+Eh5UPXWoHjec6rGY
-            ElIJZTHB5cLqxuj1+gXXvi8ALXZfK9kUMUlmNTRh/hIMFUcCwrDt03HqVS4hBmFY
-            RGPywtAK12inSqg9OKNm2p0fOADKeAVQe8gGcF9yylVQqqije2IBPRhhUIy1t/3U
-            ZgEJAhDJi+OhQ2vMkt8ym/uhs2zHL3ZdsbC1HpbHcQHfxgJY5f7utKJsp+4emPu5
-            aljIcismK3U/PgB6XN/3NiSCMEGd6KogGrOY4TWmDPhzvEKGsVchk7O6eQKH3CR6
-            pN6JTThdGw==
-            =S1Z/
-            -----END PGP MESSAGE-----
-          fp: 2CC2B3631D5C3393901335DB68F95C5D753EE1E5
-        - created_at: "2023-06-19T18:36:07Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMAy5t8IMoPu4VAQ//YwcVVkVzS1lQeX77wGkYEPw/zPnBPWA99eI/+UyvoRaw
-            croZrtQvudBQVuKjMa/JlUhLYp3+skrv/rCNG3xG9L28FQn4fkqP08vLEMH3Q+BV
-            +6m7Z41mqjXvxHzlbQLjtMB+d642LfRyOCgP1VPpA6J5QuD4Gxw2yH1a12lSXCy8
-            1ZnMw2EPIAXoy9uLeX5klzxNGih5aFATzx1oHGWbh7HHQwPQtn6KMoNUYPJrJDku
-            qkPxHewxA9jKTGNIc5N9HTfHm5VjYLwTO9MOsJ2DpkJkFYTgVCgyooHCyQCvfpod
-            SEvntJxvkz0WFHhIQVVqxCCdKwjw1T82EVnqCAN08x+4olHVApoEt0dnFohlt1mL
-            7FXQot0VddnJ6D0ZPowmRl49Yu2U7yyM+Gwg8N0JdDCqwjBEKIFuR5GRAHGBwb4D
-            RotZ0he1lR2arbJBjnIcjgO0Yb8+YzXvVTjmp/TjPx2PRID4B00AsvLdmWdHU57W
-            gWszKwtE3tUAcxGY9T+BiQOTJuFR8bOa1EiUF0p2pbrM/Xc4g4LHNnnH4bZzZm2v
-            oRPWrQunch+sNujlObP2akbmrHZvhj00mN/d+/PKNVaCPQ+j6UGtFyKYfUJyLjsi
-            WWjm/OSc4HmITKG5BI1OjWsIKtCbMLNMHIvPgKeW9qwmMDU3J+/toKZEIz/pIt7U
-            ZgEJAhB4YPeqQgy9FVmDsKNK7iQpM6wZXVR+uj9Tx/KLe4MSBzpG7zYqBUBNW94T
-            Hyq/OxupUWsxSgtly5yEoihyBQhBf0ECXHw5v5xhxFgouqm/NwSixwt6baRr5lmI
-            d3rYPlnimA==
-            =sP0R
-            -----END PGP MESSAGE-----
-          fp: 687802D4DFD8AA82EA55666CF7DADAC782D7663D
-    encrypted_regex: ^(data|stringData)$
-    version: 3.7.3
--- a/cluster/apps/default/gitea/helm-release.yaml
+++ b/cluster/apps/default/gitea/helm-release.yaml
@ -1,89 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: gitea
-  namespace: default
-spec:
-  interval: 5m
-  chart:
-    spec:
-      chart: app-template
-      version: 1.3.x
-      sourceRef:
-        kind: HelmRepository
-        name: bjws-charts
-        namespace: flux-system
-
-  values:
-    image:
-      repository: gitea/gitea
-      tag: "1.19.0"
-
-    podLabels:
-      needsDatabase: "yes"
-      needsAuthentik: "yes"
-
-    env:
-      USER_UID: 1000
-      USER_GID: 1000
-
-    envFrom:
-      - secretRef:
-          name: gitea-secret
-
-    # Sidecar used for mirroring GitHub repos to gitea
-    sidecars:
-      mirror-to-gitea:
-        image: jaedle/mirror-to-gitea:latest
-        imagePullPolicy: Always
-        envFrom:
-        - secretRef:
-            name: gitea-sidecar-secret
-
-    service:
-      main:
-        ports:
-          http:
-            port: 3000
-
-      ssh:
-        enabled: true
-        type: NodePort
-        ports:
-          ssh:
-            enabled: true
-            port: 22
-            protocol: TCP
-            nodePort: 30022
-
-    probes:
-      liveness:
-        enabled: false
-
-    ingress:
-      main:
-        enabled: true
-        annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-production
-          traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        hosts:
-          - host: &host "git.${SECRET_NEW_DOMAIN}"
-            paths:
-              - path: /
-                pathType: Prefix
-        tls:
-          - hosts:
-              - *host
-            secretName: wildcard-main-tls
-
-    persistence:
-      storage:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/gitea
-        mountPath: /data
-      dumps:
-        enabled: true
-        type: hostPath
-        hostPath: /mnt/MainPool/Kubernetes/gitea-dumps
-        mountPath: /dumps
--- a/cluster/apps/default/gitea/kustomization.yaml
+++ b/cluster/apps/default/gitea/kustomization.yaml
@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
- ./gitea-secret.sops.yaml
- ./gitea-sidecar-secret.sops.yaml
- ./helm-release.yaml
--- a/cluster/apps/default/msrewards/helm-release.yaml
+++ b/cluster/apps/default/msrewards/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: msrewardfarmer
--- a/cluster/apps/default/trilium/helm-release.yaml
+++ b/cluster/apps/default/trilium/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: trilium
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: zadam/trilium
-      tag: 0.61-latest
+      tag: 0.63-latest

    env:
      TRILIUM_PORT: &port 8080
--- a/cluster/apps/default/whoami/helm-release.yaml
+++ b/cluster/apps/default/whoami/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: whoami
--- a/cluster/apps/dev/code/helm-release.yaml
+++ b/cluster/apps/dev/code/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: code
@ -29,7 +29,7 @@ spec:

    image:
      repository: codercom/code-server
-      tag: "4.16.1"
+      tag: "4.20.1"
    
    service:
      main:
--- a/cluster/apps/dev/woodpecker/helm-release.yaml
+++ b/cluster/apps/dev/woodpecker/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: woodpecker
--- a/cluster/apps/download/bazarr/helm-release.yaml
+++ b/cluster/apps/download/bazarr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: bazarr
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/bazarr
-      tag: "1.2.4"
+      tag: "1.4.0"

    env:
      TZ: America/New_York
--- a/cluster/apps/download/flaresolverr/helm-release.yaml
+++ b/cluster/apps/download/flaresolverr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: flaresolverr
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: ghcr.io/flaresolverr/flaresolverr
-      tag: v3.3.2
+      tag: v3.3.13

    env:
      LOG_LEVEL: info
--- a/cluster/apps/download/mylar3/helm-release.yaml
+++ b/cluster/apps/download/mylar3/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: mylar3
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: lscr.io/linuxserver/mylar3
-      tag: "0.7.3"
+      tag: "0.7.8"

    env:
      TZ: America/New_York
--- a/cluster/apps/download/prowlarr/helm-release.yaml
+++ b/cluster/apps/download/prowlarr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: prowlarr
@ -17,12 +17,12 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/prowlarr-develop
-      tag: "1.8.1.3837"
+      tag: "1.12.2.4211"

    # Metrics sidecar
    sidecars:
      exportarr:
-        image: ghcr.io/onedr0p/exportarr:v1.5.3
+        image: ghcr.io/onedr0p/exportarr:v1.6.0
        args:
        - prowlarr
        ports:
--- a/cluster/apps/download/qbit-manage/helm-release.yaml
+++ b/cluster/apps/download/qbit-manage/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: qbit-manage
@ -19,7 +19,7 @@ spec:
      # this init container copies the read only config from the configmap volume, into
      # an emptydir volume mount that the pod can write to.
      copy-config:
-        image: alpine:3.18
+        image: alpine:3.19
        command:
        - /bin/sh
        - -c
@ -35,7 +35,7 @@ spec:

    image:
      repository: bobokun/qbit_manage
-      tag: "v4.0.6"
+      tag: "v4.0.7"

    env:
      QBT_STARTUP_DELAY: 45 # seconds
--- a/cluster/apps/download/qbittorrent/helm-release.yaml
+++ b/cluster/apps/download/qbittorrent/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: qbittorrent
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: lscr.io/linuxserver/qbittorrent
-      tag: "4.5.4"
+      tag: "4.6.3"

    sidecars:
      gluetun:
@ -51,7 +51,7 @@ spec:
          mountPath: /tmp/gluetun/

      metrics:
-        image: caseyscarborough/qbittorrent-exporter:v1.3.2
+        image: caseyscarborough/qbittorrent-exporter:v1.3.5
        env:
          QBITTORRENT_BASE_URL: "http://localhost:8080"
          # safe to have in plain text since qbittorrent is exposed through authentik.
--- a/cluster/apps/download/radarr/helm-release.yaml
+++ b/cluster/apps/download/radarr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: radarr
@ -17,12 +17,12 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/radarr-develop
-      tag: "4.7.3.7731"
+      tag: "4.7.5.7809"

    # Metrics sidecar
    sidecars:
      exportarr:
-        image: ghcr.io/onedr0p/exportarr:v1.5.3
+        image: ghcr.io/onedr0p/exportarr:v1.6.0
        args:
        - radarr
        ports:
--- a/cluster/apps/download/readarr/audiobook-helm.yaml
+++ b/cluster/apps/download/readarr/audiobook-helm.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: readarr-audiobooks
@ -17,13 +17,13 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/readarr-develop
-      tag: "0.3.0.2091"
+      tag: "0.3.15.2376"
      pullPolicy: Always

    # Metrics sidecar
    sidecars:
      exportarr:
-        image: ghcr.io/onedr0p/exportarr:v1.5.3
+        image: ghcr.io/onedr0p/exportarr:v1.6.0
        args:
        - readarr
        ports:
--- a/cluster/apps/download/readarr/ebook-helm.yaml
+++ b/cluster/apps/download/readarr/ebook-helm.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: readarr-ebooks
@ -17,13 +17,13 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/readarr-develop
-      tag: "0.3.0.2091"
+      tag: "0.3.15.2376"
      pullPolicy: Always

    # Metrics sidecar
    sidecars:
      exportarr:
-        image: ghcr.io/onedr0p/exportarr:v1.5.3
+        image: ghcr.io/onedr0p/exportarr:v1.6.0
        args:
        - readarr
        ports:
--- a/cluster/apps/download/sonarr/helm-release.yaml
+++ b/cluster/apps/download/sonarr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: sonarr
@ -17,12 +17,12 @@ spec:
  values:
    image:
      repository: ghcr.io/onedr0p/sonarr-develop
-      tag: "4.0.0.610"
+      tag: "4.0.1.953"

    # Metrics sidecar
    sidecars:
      exportarr:
-        image: ghcr.io/onedr0p/exportarr:v1.5.3
+        image: ghcr.io/onedr0p/exportarr:v1.6.0
        args:
        - sonarr
        ports:
--- a/cluster/apps/download/unpackerr/helm-release.yaml
+++ b/cluster/apps/download/unpackerr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: unpackerr
--- a/cluster/apps/game-servers/factorio/helm-release.yaml
+++ b/cluster/apps/game-servers/factorio/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: factorio
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: goofball222/factorio
-      tag: "1.1.80"
+      tag: "1.1.101"

    service:
      main:
--- a/cluster/apps/harbor/helm-release.yaml
+++ b/cluster/apps/harbor/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: harbor
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: harbor
-      version: 1.3.x
+      version: 1.14.x
      sourceRef:
        kind: HelmRepository
        name: harbor-charts
--- a/cluster/apps/irc/thelounge/helm-release.yaml
+++ b/cluster/apps/irc/thelounge/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: thelounge
--- a/cluster/apps/irc/znc/helm-release.yaml
+++ b/cluster/apps/irc/znc/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: znc
@ -21,7 +21,7 @@ spec:
    # Add init container for pulling znc modules and putting them into the modules directory
    initContainers:
      pull-module-source:
-        image: alpine:3.18.3
+        image: alpine:3.19.0
        command:
          - "sh"
          - "-c"
--- a/cluster/apps/management/guacamole/helm-release.yaml
+++ b/cluster/apps/management/guacamole/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: guacamole
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: abesnier/guacamole
-      tag: 1.5.0-alpine
+      tag: 1.5.4-alpine

    env:
      EXTENSIONS: "auth-openid"
--- a/cluster/apps/media/audiobookshelf/helm-release.yaml
+++ b/cluster/apps/media/audiobookshelf/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: audiobookshelf
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: ghcr.io/advplyr/audiobookshelf
-      tag: "2.4.0"
+      tag: "2.7.2"

    service:
      main:
--- a/cluster/apps/media/freshrss/helm-release.yaml
+++ b/cluster/apps/media/freshrss/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: freshrss
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: linuxserver/freshrss
-      tag: "1.21.0"
+      tag: "1.23.1"

    env:
      PUID: 10000
--- a/cluster/apps/media/jellyfin/helm-release.yaml
+++ b/cluster/apps/media/jellyfin/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: jellyfin
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: linuxserver/jellyfin
-      tag: "10.8.11"
+      tag: "10.8.13"

    podLabels:
      needsAuthentik: "yes"
--- a/cluster/apps/media/jellyseerr/helm-release.yaml
+++ b/cluster/apps/media/jellyseerr/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: jellyseerr
--- a/cluster/apps/media/kavita/helm-release.yaml
+++ b/cluster/apps/media/kavita/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: kavita
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: kizaing/kavita
-      tag: "0.7.7"
+      tag: "0.7.8"
    service:
      main:
        ports:
--- a/cluster/apps/media/komga/helm-release.yaml
+++ b/cluster/apps/media/komga/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: komga
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: gotson/komga
-      tag: "1.3.1"
+      tag: "1.10.2"

    env:
      TZ: America/New_York
--- a/cluster/apps/media/ombi/helm-release.yaml
+++ b/cluster/apps/media/ombi/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: ombi
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: lscr.io/linuxserver/ombi
-      tag: "4.39.1"
+      tag: "4.43.5"

    env:
      TZ: America/New_York
--- a/cluster/apps/media/plex/helm-release.yaml
+++ b/cluster/apps/media/plex/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: plex
@ -18,7 +18,7 @@ spec:

    image:
      repository: lscr.io/linuxserver/plex
-      tag: "1.32.5"
+      tag: "1.32.8"

    env:
      TZ: "America/New_York"
--- a/cluster/apps/media/tautulli/helm-release.yaml
+++ b/cluster/apps/media/tautulli/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: tautulli
@ -18,7 +18,7 @@ spec:

    image:
      repository: ghcr.io/onedr0p/tautulli
-      tag: 2.12.3@sha256:873832cec51b99d5fbcf179bad9a7bbe609518d821eb982dab0b297b8c0cfc6a
+      tag: 2.13.4@sha256:7682cdcf98dbdd236a21d1a7b7b380928dbd67283dce9a76398a7c1461b0f802

    env:
      TZ: "America/New_York"
--- a/cluster/apps/monitoring/alertmanager-gotify-bridge/helm-release.yaml
+++ b/cluster/apps/monitoring/alertmanager-gotify-bridge/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: alertmanager-gotify-bridge
--- a/cluster/apps/monitoring/grafana/helm-release.yaml
+++ b/cluster/apps/monitoring/grafana/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: grafana
--- a/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
+++ b/cluster/apps/monitoring/kube-prometheus-stack/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: kube-prometheus-stack
--- a/cluster/apps/monitoring/proxmoxve-exporter/helm-release.yaml
+++ b/cluster/apps/monitoring/proxmoxve-exporter/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: proxmoxve-exporter
--- a/cluster/apps/monitoring/varken/helm-release.yaml
+++ b/cluster/apps/monitoring/varken/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: varken
--- a/cluster/apps/monitoring/victoria-metrics/helm-release.yaml
+++ b/cluster/apps/monitoring/victoria-metrics/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: victoria-metrics
--- a/cluster/apps/monitoring/zfs-exporter/helm-release.yaml
+++ b/cluster/apps/monitoring/zfs-exporter/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: zfs-exporter
--- a/cluster/apps/tools/gotify/helm-release.yaml
+++ b/cluster/apps/tools/gotify/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: gotify
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: ghcr.io/gotify/server
-      tag: "2.3.0"
+      tag: "2.4.0"

    env:
      TZ: America/New_York
--- a/cluster/apps/tools/hastebin/helm-release.yaml
+++ b/cluster/apps/tools/hastebin/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: hastebin
--- a/cluster/apps/tools/transfersh/helm-release.yaml
+++ b/cluster/apps/tools/transfersh/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: transfersh
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: dutchcoders/transfer.sh
-      tag: v1.6.0
+      tag: v1.6.1

    args:
      - --provider
--- a/cluster/apps/tools/vaultwarden/helm-release.yaml
+++ b/cluster/apps/tools/vaultwarden/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: vaultwarden
@ -17,7 +17,7 @@ spec:
  values:
    image:
      repository: vaultwarden/server
-      tag: "1.29.1"
+      tag: "1.30.1"

    service:
      main:
--- a/cluster/base/ks.yaml
+++ b/cluster/base/ks.yaml
@ -1,4 +1,4 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: cluster-secrets
@ -16,7 +16,7 @@ spec:
    secretRef:
      name: sops-gpg
 ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: crds
@ -30,7 +30,7 @@ spec:
    kind: GitRepository
    name: flux-system
 ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: core
@ -58,7 +58,7 @@ spec:
      - kind: Secret
        name: cluster-secrets
 ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: apps
--- a/cluster/core/cert-manager/helm-release.yaml
+++ b/cluster/core/cert-manager/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: cert-manager
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: cert-manager
-      version: v1.11.0
+      version: v1.13.3
      sourceRef:
        kind: HelmRepository
        name: jetstack-charts
--- a/cluster/core/helm-repositories.yaml
+++ b/cluster/core/helm-repositories.yaml
@ -15,12 +15,3 @@ metadata:
 spec:
  interval: 1m
  url: https://bjw-s.github.io/helm-charts
---
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: grafana-charts
-  namespace: flux-system
-spec:
-  interval: 1m
-  url: https://grafana.github.io/helm-charts
--- a/cluster/core/kube-replicator/helm-release.yaml
+++ b/cluster/core/kube-replicator/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: kube-replicator
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: kubernetes-replicator
-      version: '2.7.x'
+      version: '2.9.x'
      sourceRef:
        kind: HelmRepository
        name: mittwald-charts
--- a/cluster/core/kube-system/local-path-config.yaml
+++ b/cluster/core/kube-system/local-path-config.yaml
@ -25,7 +25,7 @@ data:
    spec:
      containers:
      - name: helper-pod
-        image: rancher/mirrored-library-busybox:1.34.1
+        image: rancher/mirrored-library-busybox:1.36.1
  setup: |-
    #!/bin/sh
    while getopts "m:s:p:" opt
--- a/cluster/core/networking/calico/calico-helm.yaml
+++ b/cluster/core/networking/calico/calico-helm.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: calico
--- a/cluster/core/networking/calico/tigera-helm.yaml
+++ b/cluster/core/networking/calico/tigera-helm.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: tigera-operator
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: tigera-operator
-      version: 3.25.x
+      version: 3.27.x
      sourceRef:
        kind: HelmRepository
        name: calico-charts
--- a/cluster/core/networking/metallb/helm-release.yaml
+++ b/cluster/core/networking/metallb/helm-release.yaml
@ -7,7 +7,7 @@ spec:
  interval: 1m
  url: https://metallb.github.io/metallb
 ---
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: metallb
@ -17,7 +17,7 @@ spec:
  chart:
    spec:
      chart: metallb
-      version: 0.13.9
+      version: 0.13.12
      sourceRef:
        kind: HelmRepository
        name: metallb-charts
--- a/cluster/core/networking/traefik/helm-release.yaml
+++ b/cluster/core/networking/traefik/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: traefik
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: traefik
-      version: '22.0.0'
+      version: '22.3.0'
      sourceRef:
        kind: HelmRepository
        name: traefik-charts
--- a/cluster/core/storage/local-path-provisioner/helm.yaml
+++ b/cluster/core/storage/local-path-provisioner/helm.yaml
@ -1,4 +1,4 @@
-apiVersion: source.toolkit.fluxcd.io/v1beta2
+apiVersion: source.toolkit.fluxcd.io/v1
 kind: GitRepository
 metadata:
  name: local-path-provisioner
@ -7,9 +7,9 @@ spec:
  interval: 1m
  url: https://github.com/rancher/local-path-provisioner.git
  ref:
-    tag: v0.0.24
+    tag: v0.0.26
 ---
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: local-path-provisioner
--- a/cluster/core/storage/longhorn/helm-release.yaml
+++ b/cluster/core/storage/longhorn/helm-release.yaml
@ -1,4 +1,4 @@
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
  name: longhorn
@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: longhorn
-      version: "1.5.1"
+      version: "1.5.3"
      sourceRef:
        kind: HelmRepository
        name: longhorn-charts
--- a/cluster/crds/kube-prometheus-stack/crds.yaml
+++ b/cluster/crds/kube-prometheus-stack/crds.yaml
@ -1,5 +1,5 @@
 ---
-apiVersion: source.toolkit.fluxcd.io/v1beta2
+apiVersion: source.toolkit.fluxcd.io/v1
 kind: GitRepository
 metadata:
  name: kube-prometheus-stack-source
@ -15,7 +15,7 @@ spec:
    # include crds directory
    !/charts/kube-prometheus-stack/crds
 ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: crds-kube-prometheus-stack
--- a/cluster/crds/metallb/crds.yaml
+++ b/cluster/crds/metallb/crds.yaml
@ -1,5 +1,5 @@
 ---
-apiVersion: source.toolkit.fluxcd.io/v1beta2
+apiVersion: source.toolkit.fluxcd.io/v1
 kind: GitRepository
 metadata:
  name: metallb-source
@ -9,14 +9,14 @@ spec:
  url: https://github.com/metallb/metallb.git
  ref:
    # renovate: registryUrl=https://metallb.github.io/metallb chart=metallb
-    tag: v0.13.9
+    tag: v0.13.12
  ignore: |
    # exclude all
    /*
    # include crd directory
    !/config/crd
 ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: crds-metallb
--- a/cluster/crds/traefik/crds.yaml
+++ b/cluster/crds/traefik/crds.yaml
@ -1,5 +1,5 @@
 ---
-apiVersion: source.toolkit.fluxcd.io/v1beta1
+apiVersion: source.toolkit.fluxcd.io/v1
 kind: GitRepository
 metadata:
  name: traefik-crd-source
@ -9,14 +9,14 @@ spec:
  url: https://github.com/traefik/traefik-helm-chart.git
  ref:
    # renovate: registryUrl=https://helm.traefik.io/traefik chart=traefik
-    tag: v22.0.0
+    tag: v22.3.0
  ignore: |
    # exclude all
    /*
    # path to crds
    !/traefik/crds/
 ---
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
  name: traefik-crds