From fee900fa72e182a2c983d43796316b034f0670c8 Mon Sep 17 00:00:00 2001
From: Morten Olsen <fbtijfdq@void.black>
Date: Sat, 6 Sep 2025 21:21:00 +0200
Subject: [PATCH] home assistant

---
 assets/2025-09-06-12-29-07.png                | Bin 0 -> 7256 bytes
 assets/2025-09-06-12-29-15.png                | Bin 0 -> 7256 bytes
 assets/2025-09-06-12-29-26.png                | Bin 0 -> 7256 bytes
 charts/apps/gitea/templates/deployment.yaml   |  58 +++++------
 charts/apps/home-assistant/Chart.yaml         |   3 +
 .../home-assistant/templates/deployment.yaml  |  44 +++++++++
 .../templates/http-service.yaml               |  11 +++
 charts/apps/home-assistant/templates/pvc.yaml |  11 +++
 .../home-assistant/templates/service.yaml     |  15 +++
 charts/apps/home-assistant/values.yaml        |   8 ++
 charts/apps/music-assistant/Chart.yaml        |   3 +
 .../music-assistant/templates/deployment.yaml |  44 +++++++++
 .../templates/http-service.yaml               |  11 +++
 .../apps/music-assistant/templates/pvc.yaml   |  11 +++
 .../music-assistant/templates/service.yaml    |  15 +++
 charts/apps/music-assistant/values.yaml       |   7 ++
 charts/apps/photoprism/Chart.yaml             |   3 +
 charts/apps/photoprism/templates/client.yaml  |  10 ++
 .../apps/photoprism/templates/deployment.yaml |  92 ++++++++++++++++++
 .../templates/external-http-service.yaml      |  11 +++
 .../photoprism/templates/http-service.yaml    |  11 +++
 charts/apps/photoprism/templates/pvc.yaml     |  11 +++
 charts/apps/photoprism/templates/secret.yaml  |   9 ++
 charts/apps/photoprism/templates/service.yaml |  15 +++
 charts/apps/photoprism/values.yaml            |   7 ++
 charts/backup/templates/cron-job-backup.yaml  |   3 +
 charts/backup/templates/cron-job-cleanup.yaml |   3 +
 27 files changed, 388 insertions(+), 28 deletions(-)
 create mode 100644 assets/2025-09-06-12-29-07.png
 create mode 100644 assets/2025-09-06-12-29-15.png
 create mode 100644 assets/2025-09-06-12-29-26.png
 create mode 100644 charts/apps/home-assistant/Chart.yaml
 create mode 100644 charts/apps/home-assistant/templates/deployment.yaml
 create mode 100644 charts/apps/home-assistant/templates/http-service.yaml
 create mode 100644 charts/apps/home-assistant/templates/pvc.yaml
 create mode 100644 charts/apps/home-assistant/templates/service.yaml
 create mode 100644 charts/apps/home-assistant/values.yaml
 create mode 100644 charts/apps/music-assistant/Chart.yaml
 create mode 100644 charts/apps/music-assistant/templates/deployment.yaml
 create mode 100644 charts/apps/music-assistant/templates/http-service.yaml
 create mode 100644 charts/apps/music-assistant/templates/pvc.yaml
 create mode 100644 charts/apps/music-assistant/templates/service.yaml
 create mode 100644 charts/apps/music-assistant/values.yaml
 create mode 100644 charts/apps/photoprism/Chart.yaml
 create mode 100644 charts/apps/photoprism/templates/client.yaml
 create mode 100644 charts/apps/photoprism/templates/deployment.yaml
 create mode 100644 charts/apps/photoprism/templates/external-http-service.yaml
 create mode 100644 charts/apps/photoprism/templates/http-service.yaml
 create mode 100644 charts/apps/photoprism/templates/pvc.yaml
 create mode 100644 charts/apps/photoprism/templates/secret.yaml
 create mode 100644 charts/apps/photoprism/templates/service.yaml
 create mode 100644 charts/apps/photoprism/values.yaml

diff --git a/assets/2025-09-06-12-29-07.png b/assets/2025-09-06-12-29-07.png
new file mode 100644
index 0000000000000000000000000000000000000000..98de0bb7b2adaa93cfe7fdbbec7e0aba84489dd1
GIT binary patch
literal 7256
zcmd^ES5%YPx8GlgBuKY1AQH!#p^6{~2(f{HfCL4lNYr6yVo)j4KP-ceU>O342*H7X
zfK(NvXLKwB3IS12q&SpN1tHWxau4%#U+%;I;jVSpx(`|3{&LRQXP=$l+55M5t{=9w
zkX^348~|i35ALS}5Rga!vLt#4F1F00hm`-p;}-y=S1f(7=8nh(fOX3)_wPA!@&0Is
z`!(0&k!s^Rl1>_=7_Q&7{n7E)2T!X!H~MOI<L`ctxX?qfNmEywUTyMS_uT7E%_jNe
zw3yq(b({A59<lw|)?TWuNj^#ZLcaY{$-af#e!Da*W8dXUuM}>myrZ*8fpCXgq_j8C
z@Uz1`dhpS_+`OSqmzkM4+Jlh0gB3Gh)~Al`<_9-~j0yyL7!)5#Gl0J~0?=sa48%?U
zPldv;f$=+*4y{y<TI;5w3pLJhuk1`p`>KONLo3u<m-{B`O+{J_k{qnc<HgogPVHU#
z{6(w5mCkD<`F3<Gu{K9giyp=t0o%c<>ydd+)UbV23~(t44WdaZXPC+v)Bn8e?QD?M
zpg5BiX~q$x*zb!*<A?6eFR61kT2N2>spyYvDyN6lTzE9&d!dDw35KWYdk+<6vP6zQ
ze2jV*Pu#i5PPI4mQrAPYfl-V3YG|VxMWlO_$1gZq4Z1sJeE;*dvOA>DY_VA^XEirw
zvm#quO?eMYbakw#qw*(TMgxtRu(u}aK7HQQPHG^TnZ**F)K?aNEHG8V@Xlntz=AjL
z4n%bI4Z`lE8>F$(e*`#M!n!F|eX+om`&>?;0IyuPg?&RPip|DGo~<K_nzTkV(YMK#
z4pAF8g8Gl65)v$5qUaZW<y*o~UjpQ(=uLfK(L23*3VkCO-18)1`v<RuIn&NRfR=|0
zy+Gv{_s>PsYTO)U1U}9*NMGHTFE&e*4Tm4+3+G~g_tA^|91~U;>MtwfN}UiUHmH%c
z?7~Ei=YuTyu~2k0K1-zCKaVxceelr}ebP!f01WlI+hVo0w<N{`Gh6E7F{k$BDFj9j
z+N@8vw{VhlY=lI&iaM6KzswdG8FgnPYX^d*8C3Qgl8nv0`Nh(d`c<HEx<-wmDK1cs
ztNr4*aygv&D>FwNW;Gb|WDD0hGFv&0S=w}k00<a?ov&tY(XH4mzk|y6cgTjXeg>Qn
zXRZ7r^Wx$LHAY6{!`R%j35uY_2@pjcTYe1Ms`76V$?)irj1bvZ{a^}8eS9}?S3%Nu
z3!^C9v3C#`m&R$YfMb@)NxFP_UYecVz4<bOMLz;qBX^ED50QA++1pg|{bGSjuhZ^y
zfA0*bb73BNQ*nohZ`2dqpSictA+<g=$RX}k?bB~p$>8eM+!AOtXfJYWqC@rgD62U;
zw`q3JXzl6cxYJxkgIc=Ngh;)%?AtOa&^RJDb1qYxChqNvt}SUeDg|#55F@q<F~R3X
z1X<~%YMMUWcPO1(OvK5&u&x609<#9I8-leali?j>l3d%_C3n5|&}wm?sQS6N#odw`
zQR|4c{lG@%CplIhbAT$wfEvSd(GtOL?x<F$yWp+SgfUhWU*n6WyY)SfgK^iKO^Y`9
zSkdG2F-v$dJKir@HM)JO-kHG2?z3qZEtVKi;C7cN3VHT`HH=i*X;&H`z)m+lA#fQB
z&AJ9Z0@3N_+~P4o5GdWYOYCsf-UQ>evui*p&A6~)BStBjm==dFji#$398DZ3+YEnA
z2WJ=n7hjyban=UNxkp4PLXuK}tMqvJf#9w1*VGAtB#^tiG%5~Yl=KpFL0Cqa1P$0)
z{HpsK;V;2tlL}C77rw1Liczv^*HvRcm>Uc!`w56UyoaLt$|bH$6o<4+43qyUU%fOq
zzt)p^9LSlgE-lcICFFs^v}zBGvL;4^l+9=6)ar%t2{a9}e<usKJ}%ROza}D<HYrj|
zt`5W~*Gi_e;atR-AYTSXxmi9;!^nMVhnS9V?M1&CC}Gz!HN?XGNHrxw{6va~E8Q2$
z(;RJv0f{1WbeQg|wW&m0M`ZP{+_(j!#MUYx(=L7uv3~|S{v6<4kYo&5HE+K%{&GMT
zxb<6X+@#^f%%`Q7U1nM!)0O>)0RTVT5tK~T0St#72;A`qlTZopZ%9GnV)?&QyEH+D
z?J2|EWkiB&{NF%_fxKQk;0N4r0=H<<3mL#L#ZW3mS(8Hf-xWeT_Qm+8Ic9vHIU~&4
zYEzv=pZ~li(otWzw)8st@gqwIwQSbev)vXQdFDNpqpnk@kg2s)j=GyWY4H^Cf3We_
z(Viw1yxdmb+AwVwpA0XivzOkT-RKtD7yA)D{?j~*5))`63wGN)=ly^Ij-#E)2jM>u
z-khXyOHHh()ttZwY$6Jd=-PW*4IUfbYnDv-?|LNNBy_xoe5ss;@;mejx~W0ptQ|X%
zko9^F1(E*km=fzxB5vu>wJlY6Vo<;=nA_NuHuq`nRy>^-;2QVJ!q;5~0=zsWXd#u2
zsf+m&d=(c_-EiOJ2`QpH-74leK&4kUfi@_(5EE4y@XD=jBaw;X+HpAom2(+I`7ht~
zF)lq+4Yt@sa02Fqy9WgPzc<Q{CEST7Z6-hb0n%GTRiLh26dBUqH9aoMI%KhIeHQE6
zG=&^q)iajOw%wiNZ*rkw&<*bDO(7Gz2LJ4Hb=0CQIRBv7Hs<fsZD%}xVt!P=aqGIq
z`xio2LY<2Et7Pts@MohR{R<DtnyB)sv7#47UF2=S3-MVEs$#LyF}~TbZKqRu>{+1k
zjbtG{tHx#Lmrs3PMILUN?+F&1B1JHIZwYTwrcq$D582U~K&Z6|Y4-wf^W6=sG7(b{
zVCn9Xm4OAH{-OmD@0}GHpK@n(F20WXn5w(N-#VHCem)*VMsrJ9z3IG>c=Bu_HQGat
zO2FgVLSfr#k(%WFVfO=RD-5;vNI~gYUyR~Zf&6B8@Tz!AFE03+nKKhCc7%b-d?K!U
zKf<ItaIsw=?a@Mn(qDQoM%JW3S5(Lt8G|$L%_X>p_{^H9h+V{W?RsR~uk9G{=9n+v
z(bsJwLXo|S6c~x~E3}a8?Ms5xDD^7<JALxuuu<kd^j46Rz6^X_f{C=JQI!QQs=(di
zI<J8@D~>wzqkgB~>$qSho*XHf*BWuT?L^A-(JS?(KvGZ+94>t{DwK;tT*)GYy||EL
z-eXa}V1b;ONUsZ&ZImCRwhN|h<gi<LO>N$nz_qRpOJB7Z(e}RIl&UXfff&QAu37p*
z@Ga|$ZQ3(omErS8hW)dzfCB*@o#DXY-$XY<+uqJNSdr>$`U?M8c)Pel@;v!jdxm|q
zyfyjoIx^SFQIjy@z@O3J1R%EdOPYL_IX}uVvK^%^lLO<Cb0Sm2^DG_6b2frQ_lz2^
z*S5y5X<#lGOst#rh?#G-k9$R;a@G;oKUwU!(CdADUl{VyZyW;mZK$}QZ<na7P9<ts
zRs0Cy7;(q)gX10RV<lb3{+`4b78=HcqOQvi#9<%2!ZVnY9UL;V@R89#b9;PN=}&-j
zs&s+naW2^COv9Jr$gD=|POHT~<8=2nag053B|+<3WujM_R!pK=V!0@P?QFifofPX1
zUa*gQClugB-*XQfMW(&fpy5*&g~P~G!A7&4*7Y0GtD?m*tmdu8RV;UFYDCS8F;Y7J
z#8Y{0?TFVmv8do|pvzvaT~N5~^AB|S@qp`5YjJ#yEyl88Rt#{1N+;PrsT0q#`hIi!
zJ5a^!OUP;9S+D&70rml9ld0lI=e6B_#o43dmDoUWIhJ0vShiabMNd?bvy#Hx{FDT{
z_xakv&eKg~TD$7G&V!zXN1ElEM%O=*1AJ}6GMxUhbNY)o9}5;mIR8k7#&<5uc+=|^
zs>#`(-f1X~_yls(ht%<e-lSV8_hOH0#{o<B=T7h9tG4r1FS@c4?%?gJsjA~Q-3ZuS
zBV)8w<<v8S=90XVPO8NY64=FpdhlniEuHQ7^?cV@(D(<Zm}kud{6jSv`grWp{;bK5
z&q;UKPP-0_UzV$xw+;CS#GS?j|GbyKJTvai6?-589=U7$p`Y9OaUxAVKoQbdW$vav
zGo|t_6*&|IN+}<~^Vg?O_isA%L9APM@L)=Yw!>Z}8sohpUfL;Hz1V2~8=;Fi=UbSl
z$;QYJM<IREJzY6Y-pFuAH@Ad_-_63h&8>sA!S&Io&85yF4FyV;H+Y>EiT5C)GaXiX
z%wh_J<{12wv&E+4W4riHSD}+S|HmigX1F~H+7o1&OUiRH)K|7oG}AHw{yd`jPRwqb
z^$gh&Bl+~@HlXSF#lc0PyFJMPOC%DA%_uc5gos_5`;Xueh<5yqrN@<b-Od)}=UvVL
z3@F!fudW1kvbeTNcQx;$<Q{|6Rb+*IAD+8~3f;RRZ>SKdl0<TP955!?`U$cuIp_Hb
zEx9d(bPodeo1s?@W!&dR%07&DXD0zv4i9bnY-ClQ|Kb4*T!W&0b@p|Bv4m|zqLQHl
zRA$H7Bpkv(=Ds4XN}nEPp3bjHPyvZnbI`e8wM*#HCGy+hBcbDO4ng}vgiPPKn*0<@
z(iYlO{i+wua?DRV07xWBaQ{wZ+VA;v&pA>Ue10PhcEOo2wrHoEigHDzX7!?H%(;{w
zC^vJjUeewOzT09Zt6G~|Q<X%dYYz~&{B>pj$L5beKu+HnA${LbYu}nUg6s3loXNy0
zW|<(cvCj4~5P7f2w34y~PKc0%(q>|R_%eL8%{?QhMR(@laGDfA@u3;4ZJN#<_Moa*
zZ_{7tm%5Oo%6cz}kxwbZ=eD`gME6{d>XT<9jqPSM+I!%=(!-(X3QD3r#pBvY?X{eD
zig=kOsp?qr7VpO^y3n-4jS@6{WqtzKIeT5&d9$R$BSuqhaVt{{=iaTCY<abQoWLb;
zhHBqE5Qh)grCj|L1aHnD=qPs&W#(MPccAQ<(U&W3`RD6i5b$omVU(IZY%jJ~1vcDG
zo?%`X5T6X`1me-u^3k0}%Q8UQ*z4R2HWlgrGf)vqDtAhTZXXld*1HR%SBl{x6`mN%
z`s>fTc<mbCuXPrE-kQaLgBQ$!eq)$7#`>qszb+zpJE@lWNe#UBfY*i7cl}>CCg$Ag
zNxUH{AuSifU8A*7mqn9z@p%w_@bKLYgL1}V&uIoQK2|B>Efd?gsk&;WUOQ5w+E<G|
z`Rx<K+j}U@A3mqzB4MX0TfRQMr=g2y27C==?4YL84gQAjFE(h&jy#(*5Xf^~rI);=
zR%){Rw(*;u4Oem9+@_;^c84w+Gg%u4nQ|Xv<+l(8>648rq9^BSB*1v!Iq?46MpNEP
z-sYkjm2ufeoD+{SRfjf6SNjktfqF6b_i;1a)Meg2@Mvz?r5Dlm)uR{P9MwoOFz!yk
z(q%T5J=Nwu%JbO7*lP4Rd4srgX4-5x=u<rgYn*>U8je|}#qes4yoWBMGMn`-wx;Q8
zxVVLsxPTSKatO4LjH=d?H)@=+h@nqU9<E8Vbl}HNeG_z_Uw?0g#5i7<nwF-usGZbM
zFkJRU7!tTQ>BSe6DIFWOKl}7S|Nb3medc|)2`6)#z3ZP5t9sK(QNizb<VoTx9uF(!
zo#hE0#D9Y1`{z9S{-~`E@mxq6UUbfOBGI(-S3$GIWJiS3L|WaRZhsfw&U%*st^Hrd
zyf2CV`6DC>vC9LFa*$)@fO+nwdXA_Sx{#fIot?3IEuMBP2-?x98K$pMA&;h&YpK9_
z(%i!rac2|17rFNIOn6Rv1*KIT@^+=NRd%rRs;l#EeJM2Wk#_PV18AJjf!hIEZebpL
zw#i1&DjG2bK5N&^jQ-hS+r+^Itoz3#IT$qF(4D^OYtzkmdJ2H=adluR_*Z7+U&`1;
ztzTR>Ce8i)Q4U__H}5G{HHt#4WFwXya42jq*KuG0YkOuB2V|`M!6dq=JJ-PP3Ps-X
zfg(6lZ!SSwLD;#uaI$qyqDWsw9tQgq7}vXpOp6-SaKCmdIJlX}x;Y|Ycg}mv=)D@g
z^Nc1ON{}1vIDbZSvafXR?E#Vy(Hy_skU4e*-xr8U_w6j-K4uaHZHbNq+Pp3KVy0I2
zeUmP>vH11wN-dBqcnY^q6iCmW8mC5wkGbo0$<v&iWx)Yue-^!BO@Lnao|>6vN#I?#
zCD1}c^t$sYPqFu9BA1Ud61=Ak1nv<8Xnx3e3BCJoTGU3<@sIK}cEEbbs<Vn-NBk!H
z(6syH@y@cbd^Oy3sf+g{NgkEhA)(!8tp<JMwLFiO_td6X7*teUL%=$^)_r(F83wXD
zCGi{-cdV#=I^#iR1p|Al2WGQTF|lSa0`A_^3p}B(BP-D=Ja@FQZ}2yhvM65JyYQvq
zPsyO;yG3Rs&`@_gJz&8iBDHHRz_FjVN^p;JGTPM-T$yV$C>_@ix%&Lvpx{>UgNJqi
zj61C{JYA25#g|pW%$!1&j{oRe&!PTHYE%CG>`8x7&jf$t(FKtCn?gWZ9)CNqVLb@!
znbWA^`~08RNdMOwm#AhdT8S!?o4bDs?M5xXTvD-+2yL>j5dvBt|KS^-)wvRW{d3j7
z{Z^UwjHS{T)xS7m9q*TFVb@0F_-p(-pc8KQZ&@vcYHh=RYw6P%W3~kY|3py069DdS
z1|nlQ;E#zopfwF8%PD}8<J-{0nd^!OiDx8#rlM~e-DQ^HN{1vsXKLYRdyFFa`VB$H
zgGf<8cbSS&6t3d%vmGi6=bjXS0*y*Ex!x%U;d(!6z+Weo0Z^M`$wnL$Y*Av05ov@P
z12IT9RcuF~8D=4l5}G5g0H?Ogf<o)pkyL3YMwfnjUtg5Arqo&>Q0p<Z{Y(;$H&nxN
z_`c4Zi3p5bLuUyn970Gxj+WI~e-JwmXor>vkKxQTn}`?ni*!N9uyM_5TpF;12k9|Q
z?HC1rL5IkjXqygXj{^6(qB}-;SfW23KQM}V2{ZiFVjC$a{$Uv?6-Z0hEW^3zP`qux
zrR>(&SS>9DN@yg_Nz|bQM9)>g@LyjwG-@UVtIG6=T*ip@g^dJwzZ#of25k{)u1Ds~
ztbyT^^B0-M-0i|Cu!ipP^R@z#vjoF)RQvN3b3KM14_-|qjAX`e9)@`nK%3R;^%F2=
z9xViy0oOXW$&jr)MazSc*f0;};LQY>{IYX36s@#HX3<qDq)-bji!dS!JZAZj_@hVR
zVPF)L7;tyzOYmHT^#yZm3t&9Zef0BX3N9+I_4yz^PJqJmc``dNo_t7W)Tp;JhD#@e
z;=A*SJZax|!p0SFkyBFD>!!JkS6&_1zvzj2d7QWU)aAs1hRUSlW3|_S+iYdu9ib`7
zs|aq@oHs@%+{_u@PX@2X&#T3gs849#d0~EkJ$9yJ(dNiP<3=bdNlw7_0(bgM{-hlN
zk~S0J%m+tf@g^v`nXHh$1sE4fJLk4ycwnDGx{d<lbSE=oX<`aJ^5p1B@DB;e>DuEm
zx)qAHd$7S+lJIB?b4-}*r!iHDtT9h;?`|}tkr~wT+w-rs1kbu80{2ydd#~@!6_U?*
zi#FdzYk$J<{B19z!-fdZ5aQS`WF~z$lBxi0x%9Q;sPTP0QSzc`Z*A*zxY&dME>3Z;
zUWeRN=Ll%N646V|8{2*%UlF_xB(Hepp@;fwnMdZjM&IX4!xNuh^k{yd6VO=q%CtIU
zn7tWz6}rl|<Hu7RmxDxt`a<E;^5Vwa6Ei6mPIb*m)hM2RAe2-3b7N5Ndx8GA>$QRC
zaV%<yn`k1I)mo=@X-EQhV;PIeCMNi90}Js$WA}P&-?4|g{RLO+?&$2T;KA!sAh4Ap
z7}WiSS(Bno>n<!Xznyw*#*xH3e-b;W+TAm{wR|L-HF5ni^WrI*#l$KPts&!)^Q2lE
zMHr~2YuuIKiV#gbL71Doxs~*UqTOd)rz$RZJF1O-%IqT<=R|7XQL9(DnLLtU7AFHK
z6PW??ulvUC?^ywDmL9XCMd9@0R)&jT1V^G*_m(a640?Jo=Wmcf=J}Hoj8N?z(cR{A
zZKvUGU0&?^1iQO(Vhs%6W28cEws_F}Ik_=`)f`y6OlMo86+f+xZCBq#vdajXM!>mJ
z{Fa_t@=v$3e0%RX`2vhieN)~1IFVQE{@gb^JKH$83AmwWh(y2;aaOnuD6afJ6>QMI
aKoU<d#TV)`5hsx!!193Y{(`-XOaBGF1nQgs

literal 0
HcmV?d00001

diff --git a/assets/2025-09-06-12-29-15.png b/assets/2025-09-06-12-29-15.png
new file mode 100644
index 0000000000000000000000000000000000000000..98de0bb7b2adaa93cfe7fdbbec7e0aba84489dd1
GIT binary patch
literal 7256
zcmd^ES5%YPx8GlgBuKY1AQH!#p^6{~2(f{HfCL4lNYr6yVo)j4KP-ceU>O342*H7X
zfK(NvXLKwB3IS12q&SpN1tHWxau4%#U+%;I;jVSpx(`|3{&LRQXP=$l+55M5t{=9w
zkX^348~|i35ALS}5Rga!vLt#4F1F00hm`-p;}-y=S1f(7=8nh(fOX3)_wPA!@&0Is
z`!(0&k!s^Rl1>_=7_Q&7{n7E)2T!X!H~MOI<L`ctxX?qfNmEywUTyMS_uT7E%_jNe
zw3yq(b({A59<lw|)?TWuNj^#ZLcaY{$-af#e!Da*W8dXUuM}>myrZ*8fpCXgq_j8C
z@Uz1`dhpS_+`OSqmzkM4+Jlh0gB3Gh)~Al`<_9-~j0yyL7!)5#Gl0J~0?=sa48%?U
zPldv;f$=+*4y{y<TI;5w3pLJhuk1`p`>KONLo3u<m-{B`O+{J_k{qnc<HgogPVHU#
z{6(w5mCkD<`F3<Gu{K9giyp=t0o%c<>ydd+)UbV23~(t44WdaZXPC+v)Bn8e?QD?M
zpg5BiX~q$x*zb!*<A?6eFR61kT2N2>spyYvDyN6lTzE9&d!dDw35KWYdk+<6vP6zQ
ze2jV*Pu#i5PPI4mQrAPYfl-V3YG|VxMWlO_$1gZq4Z1sJeE;*dvOA>DY_VA^XEirw
zvm#quO?eMYbakw#qw*(TMgxtRu(u}aK7HQQPHG^TnZ**F)K?aNEHG8V@Xlntz=AjL
z4n%bI4Z`lE8>F$(e*`#M!n!F|eX+om`&>?;0IyuPg?&RPip|DGo~<K_nzTkV(YMK#
z4pAF8g8Gl65)v$5qUaZW<y*o~UjpQ(=uLfK(L23*3VkCO-18)1`v<RuIn&NRfR=|0
zy+Gv{_s>PsYTO)U1U}9*NMGHTFE&e*4Tm4+3+G~g_tA^|91~U;>MtwfN}UiUHmH%c
z?7~Ei=YuTyu~2k0K1-zCKaVxceelr}ebP!f01WlI+hVo0w<N{`Gh6E7F{k$BDFj9j
z+N@8vw{VhlY=lI&iaM6KzswdG8FgnPYX^d*8C3Qgl8nv0`Nh(d`c<HEx<-wmDK1cs
ztNr4*aygv&D>FwNW;Gb|WDD0hGFv&0S=w}k00<a?ov&tY(XH4mzk|y6cgTjXeg>Qn
zXRZ7r^Wx$LHAY6{!`R%j35uY_2@pjcTYe1Ms`76V$?)irj1bvZ{a^}8eS9}?S3%Nu
z3!^C9v3C#`m&R$YfMb@)NxFP_UYecVz4<bOMLz;qBX^ED50QA++1pg|{bGSjuhZ^y
zfA0*bb73BNQ*nohZ`2dqpSictA+<g=$RX}k?bB~p$>8eM+!AOtXfJYWqC@rgD62U;
zw`q3JXzl6cxYJxkgIc=Ngh;)%?AtOa&^RJDb1qYxChqNvt}SUeDg|#55F@q<F~R3X
z1X<~%YMMUWcPO1(OvK5&u&x609<#9I8-leali?j>l3d%_C3n5|&}wm?sQS6N#odw`
zQR|4c{lG@%CplIhbAT$wfEvSd(GtOL?x<F$yWp+SgfUhWU*n6WyY)SfgK^iKO^Y`9
zSkdG2F-v$dJKir@HM)JO-kHG2?z3qZEtVKi;C7cN3VHT`HH=i*X;&H`z)m+lA#fQB
z&AJ9Z0@3N_+~P4o5GdWYOYCsf-UQ>evui*p&A6~)BStBjm==dFji#$398DZ3+YEnA
z2WJ=n7hjyban=UNxkp4PLXuK}tMqvJf#9w1*VGAtB#^tiG%5~Yl=KpFL0Cqa1P$0)
z{HpsK;V;2tlL}C77rw1Liczv^*HvRcm>Uc!`w56UyoaLt$|bH$6o<4+43qyUU%fOq
zzt)p^9LSlgE-lcICFFs^v}zBGvL;4^l+9=6)ar%t2{a9}e<usKJ}%ROza}D<HYrj|
zt`5W~*Gi_e;atR-AYTSXxmi9;!^nMVhnS9V?M1&CC}Gz!HN?XGNHrxw{6va~E8Q2$
z(;RJv0f{1WbeQg|wW&m0M`ZP{+_(j!#MUYx(=L7uv3~|S{v6<4kYo&5HE+K%{&GMT
zxb<6X+@#^f%%`Q7U1nM!)0O>)0RTVT5tK~T0St#72;A`qlTZopZ%9GnV)?&QyEH+D
z?J2|EWkiB&{NF%_fxKQk;0N4r0=H<<3mL#L#ZW3mS(8Hf-xWeT_Qm+8Ic9vHIU~&4
zYEzv=pZ~li(otWzw)8st@gqwIwQSbev)vXQdFDNpqpnk@kg2s)j=GyWY4H^Cf3We_
z(Viw1yxdmb+AwVwpA0XivzOkT-RKtD7yA)D{?j~*5))`63wGN)=ly^Ij-#E)2jM>u
z-khXyOHHh()ttZwY$6Jd=-PW*4IUfbYnDv-?|LNNBy_xoe5ss;@;mejx~W0ptQ|X%
zko9^F1(E*km=fzxB5vu>wJlY6Vo<;=nA_NuHuq`nRy>^-;2QVJ!q;5~0=zsWXd#u2
zsf+m&d=(c_-EiOJ2`QpH-74leK&4kUfi@_(5EE4y@XD=jBaw;X+HpAom2(+I`7ht~
zF)lq+4Yt@sa02Fqy9WgPzc<Q{CEST7Z6-hb0n%GTRiLh26dBUqH9aoMI%KhIeHQE6
zG=&^q)iajOw%wiNZ*rkw&<*bDO(7Gz2LJ4Hb=0CQIRBv7Hs<fsZD%}xVt!P=aqGIq
z`xio2LY<2Et7Pts@MohR{R<DtnyB)sv7#47UF2=S3-MVEs$#LyF}~TbZKqRu>{+1k
zjbtG{tHx#Lmrs3PMILUN?+F&1B1JHIZwYTwrcq$D582U~K&Z6|Y4-wf^W6=sG7(b{
zVCn9Xm4OAH{-OmD@0}GHpK@n(F20WXn5w(N-#VHCem)*VMsrJ9z3IG>c=Bu_HQGat
zO2FgVLSfr#k(%WFVfO=RD-5;vNI~gYUyR~Zf&6B8@Tz!AFE03+nKKhCc7%b-d?K!U
zKf<ItaIsw=?a@Mn(qDQoM%JW3S5(Lt8G|$L%_X>p_{^H9h+V{W?RsR~uk9G{=9n+v
z(bsJwLXo|S6c~x~E3}a8?Ms5xDD^7<JALxuuu<kd^j46Rz6^X_f{C=JQI!QQs=(di
zI<J8@D~>wzqkgB~>$qSho*XHf*BWuT?L^A-(JS?(KvGZ+94>t{DwK;tT*)GYy||EL
z-eXa}V1b;ONUsZ&ZImCRwhN|h<gi<LO>N$nz_qRpOJB7Z(e}RIl&UXfff&QAu37p*
z@Ga|$ZQ3(omErS8hW)dzfCB*@o#DXY-$XY<+uqJNSdr>$`U?M8c)Pel@;v!jdxm|q
zyfyjoIx^SFQIjy@z@O3J1R%EdOPYL_IX}uVvK^%^lLO<Cb0Sm2^DG_6b2frQ_lz2^
z*S5y5X<#lGOst#rh?#G-k9$R;a@G;oKUwU!(CdADUl{VyZyW;mZK$}QZ<na7P9<ts
zRs0Cy7;(q)gX10RV<lb3{+`4b78=HcqOQvi#9<%2!ZVnY9UL;V@R89#b9;PN=}&-j
zs&s+naW2^COv9Jr$gD=|POHT~<8=2nag053B|+<3WujM_R!pK=V!0@P?QFifofPX1
zUa*gQClugB-*XQfMW(&fpy5*&g~P~G!A7&4*7Y0GtD?m*tmdu8RV;UFYDCS8F;Y7J
z#8Y{0?TFVmv8do|pvzvaT~N5~^AB|S@qp`5YjJ#yEyl88Rt#{1N+;PrsT0q#`hIi!
zJ5a^!OUP;9S+D&70rml9ld0lI=e6B_#o43dmDoUWIhJ0vShiabMNd?bvy#Hx{FDT{
z_xakv&eKg~TD$7G&V!zXN1ElEM%O=*1AJ}6GMxUhbNY)o9}5;mIR8k7#&<5uc+=|^
zs>#`(-f1X~_yls(ht%<e-lSV8_hOH0#{o<B=T7h9tG4r1FS@c4?%?gJsjA~Q-3ZuS
zBV)8w<<v8S=90XVPO8NY64=FpdhlniEuHQ7^?cV@(D(<Zm}kud{6jSv`grWp{;bK5
z&q;UKPP-0_UzV$xw+;CS#GS?j|GbyKJTvai6?-589=U7$p`Y9OaUxAVKoQbdW$vav
zGo|t_6*&|IN+}<~^Vg?O_isA%L9APM@L)=Yw!>Z}8sohpUfL;Hz1V2~8=;Fi=UbSl
z$;QYJM<IREJzY6Y-pFuAH@Ad_-_63h&8>sA!S&Io&85yF4FyV;H+Y>EiT5C)GaXiX
z%wh_J<{12wv&E+4W4riHSD}+S|HmigX1F~H+7o1&OUiRH)K|7oG}AHw{yd`jPRwqb
z^$gh&Bl+~@HlXSF#lc0PyFJMPOC%DA%_uc5gos_5`;Xueh<5yqrN@<b-Od)}=UvVL
z3@F!fudW1kvbeTNcQx;$<Q{|6Rb+*IAD+8~3f;RRZ>SKdl0<TP955!?`U$cuIp_Hb
zEx9d(bPodeo1s?@W!&dR%07&DXD0zv4i9bnY-ClQ|Kb4*T!W&0b@p|Bv4m|zqLQHl
zRA$H7Bpkv(=Ds4XN}nEPp3bjHPyvZnbI`e8wM*#HCGy+hBcbDO4ng}vgiPPKn*0<@
z(iYlO{i+wua?DRV07xWBaQ{wZ+VA;v&pA>Ue10PhcEOo2wrHoEigHDzX7!?H%(;{w
zC^vJjUeewOzT09Zt6G~|Q<X%dYYz~&{B>pj$L5beKu+HnA${LbYu}nUg6s3loXNy0
zW|<(cvCj4~5P7f2w34y~PKc0%(q>|R_%eL8%{?QhMR(@laGDfA@u3;4ZJN#<_Moa*
zZ_{7tm%5Oo%6cz}kxwbZ=eD`gME6{d>XT<9jqPSM+I!%=(!-(X3QD3r#pBvY?X{eD
zig=kOsp?qr7VpO^y3n-4jS@6{WqtzKIeT5&d9$R$BSuqhaVt{{=iaTCY<abQoWLb;
zhHBqE5Qh)grCj|L1aHnD=qPs&W#(MPccAQ<(U&W3`RD6i5b$omVU(IZY%jJ~1vcDG
zo?%`X5T6X`1me-u^3k0}%Q8UQ*z4R2HWlgrGf)vqDtAhTZXXld*1HR%SBl{x6`mN%
z`s>fTc<mbCuXPrE-kQaLgBQ$!eq)$7#`>qszb+zpJE@lWNe#UBfY*i7cl}>CCg$Ag
zNxUH{AuSifU8A*7mqn9z@p%w_@bKLYgL1}V&uIoQK2|B>Efd?gsk&;WUOQ5w+E<G|
z`Rx<K+j}U@A3mqzB4MX0TfRQMr=g2y27C==?4YL84gQAjFE(h&jy#(*5Xf^~rI);=
zR%){Rw(*;u4Oem9+@_;^c84w+Gg%u4nQ|Xv<+l(8>648rq9^BSB*1v!Iq?46MpNEP
z-sYkjm2ufeoD+{SRfjf6SNjktfqF6b_i;1a)Meg2@Mvz?r5Dlm)uR{P9MwoOFz!yk
z(q%T5J=Nwu%JbO7*lP4Rd4srgX4-5x=u<rgYn*>U8je|}#qes4yoWBMGMn`-wx;Q8
zxVVLsxPTSKatO4LjH=d?H)@=+h@nqU9<E8Vbl}HNeG_z_Uw?0g#5i7<nwF-usGZbM
zFkJRU7!tTQ>BSe6DIFWOKl}7S|Nb3medc|)2`6)#z3ZP5t9sK(QNizb<VoTx9uF(!
zo#hE0#D9Y1`{z9S{-~`E@mxq6UUbfOBGI(-S3$GIWJiS3L|WaRZhsfw&U%*st^Hrd
zyf2CV`6DC>vC9LFa*$)@fO+nwdXA_Sx{#fIot?3IEuMBP2-?x98K$pMA&;h&YpK9_
z(%i!rac2|17rFNIOn6Rv1*KIT@^+=NRd%rRs;l#EeJM2Wk#_PV18AJjf!hIEZebpL
zw#i1&DjG2bK5N&^jQ-hS+r+^Itoz3#IT$qF(4D^OYtzkmdJ2H=adluR_*Z7+U&`1;
ztzTR>Ce8i)Q4U__H}5G{HHt#4WFwXya42jq*KuG0YkOuB2V|`M!6dq=JJ-PP3Ps-X
zfg(6lZ!SSwLD;#uaI$qyqDWsw9tQgq7}vXpOp6-SaKCmdIJlX}x;Y|Ycg}mv=)D@g
z^Nc1ON{}1vIDbZSvafXR?E#Vy(Hy_skU4e*-xr8U_w6j-K4uaHZHbNq+Pp3KVy0I2
zeUmP>vH11wN-dBqcnY^q6iCmW8mC5wkGbo0$<v&iWx)Yue-^!BO@Lnao|>6vN#I?#
zCD1}c^t$sYPqFu9BA1Ud61=Ak1nv<8Xnx3e3BCJoTGU3<@sIK}cEEbbs<Vn-NBk!H
z(6syH@y@cbd^Oy3sf+g{NgkEhA)(!8tp<JMwLFiO_td6X7*teUL%=$^)_r(F83wXD
zCGi{-cdV#=I^#iR1p|Al2WGQTF|lSa0`A_^3p}B(BP-D=Ja@FQZ}2yhvM65JyYQvq
zPsyO;yG3Rs&`@_gJz&8iBDHHRz_FjVN^p;JGTPM-T$yV$C>_@ix%&Lvpx{>UgNJqi
zj61C{JYA25#g|pW%$!1&j{oRe&!PTHYE%CG>`8x7&jf$t(FKtCn?gWZ9)CNqVLb@!
znbWA^`~08RNdMOwm#AhdT8S!?o4bDs?M5xXTvD-+2yL>j5dvBt|KS^-)wvRW{d3j7
z{Z^UwjHS{T)xS7m9q*TFVb@0F_-p(-pc8KQZ&@vcYHh=RYw6P%W3~kY|3py069DdS
z1|nlQ;E#zopfwF8%PD}8<J-{0nd^!OiDx8#rlM~e-DQ^HN{1vsXKLYRdyFFa`VB$H
zgGf<8cbSS&6t3d%vmGi6=bjXS0*y*Ex!x%U;d(!6z+Weo0Z^M`$wnL$Y*Av05ov@P
z12IT9RcuF~8D=4l5}G5g0H?Ogf<o)pkyL3YMwfnjUtg5Arqo&>Q0p<Z{Y(;$H&nxN
z_`c4Zi3p5bLuUyn970Gxj+WI~e-JwmXor>vkKxQTn}`?ni*!N9uyM_5TpF;12k9|Q
z?HC1rL5IkjXqygXj{^6(qB}-;SfW23KQM}V2{ZiFVjC$a{$Uv?6-Z0hEW^3zP`qux
zrR>(&SS>9DN@yg_Nz|bQM9)>g@LyjwG-@UVtIG6=T*ip@g^dJwzZ#of25k{)u1Ds~
ztbyT^^B0-M-0i|Cu!ipP^R@z#vjoF)RQvN3b3KM14_-|qjAX`e9)@`nK%3R;^%F2=
z9xViy0oOXW$&jr)MazSc*f0;};LQY>{IYX36s@#HX3<qDq)-bji!dS!JZAZj_@hVR
zVPF)L7;tyzOYmHT^#yZm3t&9Zef0BX3N9+I_4yz^PJqJmc``dNo_t7W)Tp;JhD#@e
z;=A*SJZax|!p0SFkyBFD>!!JkS6&_1zvzj2d7QWU)aAs1hRUSlW3|_S+iYdu9ib`7
zs|aq@oHs@%+{_u@PX@2X&#T3gs849#d0~EkJ$9yJ(dNiP<3=bdNlw7_0(bgM{-hlN
zk~S0J%m+tf@g^v`nXHh$1sE4fJLk4ycwnDGx{d<lbSE=oX<`aJ^5p1B@DB;e>DuEm
zx)qAHd$7S+lJIB?b4-}*r!iHDtT9h;?`|}tkr~wT+w-rs1kbu80{2ydd#~@!6_U?*
zi#FdzYk$J<{B19z!-fdZ5aQS`WF~z$lBxi0x%9Q;sPTP0QSzc`Z*A*zxY&dME>3Z;
zUWeRN=Ll%N646V|8{2*%UlF_xB(Hepp@;fwnMdZjM&IX4!xNuh^k{yd6VO=q%CtIU
zn7tWz6}rl|<Hu7RmxDxt`a<E;^5Vwa6Ei6mPIb*m)hM2RAe2-3b7N5Ndx8GA>$QRC
zaV%<yn`k1I)mo=@X-EQhV;PIeCMNi90}Js$WA}P&-?4|g{RLO+?&$2T;KA!sAh4Ap
z7}WiSS(Bno>n<!Xznyw*#*xH3e-b;W+TAm{wR|L-HF5ni^WrI*#l$KPts&!)^Q2lE
zMHr~2YuuIKiV#gbL71Doxs~*UqTOd)rz$RZJF1O-%IqT<=R|7XQL9(DnLLtU7AFHK
z6PW??ulvUC?^ywDmL9XCMd9@0R)&jT1V^G*_m(a640?Jo=Wmcf=J}Hoj8N?z(cR{A
zZKvUGU0&?^1iQO(Vhs%6W28cEws_F}Ik_=`)f`y6OlMo86+f+xZCBq#vdajXM!>mJ
z{Fa_t@=v$3e0%RX`2vhieN)~1IFVQE{@gb^JKH$83AmwWh(y2;aaOnuD6afJ6>QMI
aKoU<d#TV)`5hsx!!193Y{(`-XOaBGF1nQgs

literal 0
HcmV?d00001

diff --git a/assets/2025-09-06-12-29-26.png b/assets/2025-09-06-12-29-26.png
new file mode 100644
index 0000000000000000000000000000000000000000..98de0bb7b2adaa93cfe7fdbbec7e0aba84489dd1
GIT binary patch
literal 7256
zcmd^ES5%YPx8GlgBuKY1AQH!#p^6{~2(f{HfCL4lNYr6yVo)j4KP-ceU>O342*H7X
zfK(NvXLKwB3IS12q&SpN1tHWxau4%#U+%;I;jVSpx(`|3{&LRQXP=$l+55M5t{=9w
zkX^348~|i35ALS}5Rga!vLt#4F1F00hm`-p;}-y=S1f(7=8nh(fOX3)_wPA!@&0Is
z`!(0&k!s^Rl1>_=7_Q&7{n7E)2T!X!H~MOI<L`ctxX?qfNmEywUTyMS_uT7E%_jNe
zw3yq(b({A59<lw|)?TWuNj^#ZLcaY{$-af#e!Da*W8dXUuM}>myrZ*8fpCXgq_j8C
z@Uz1`dhpS_+`OSqmzkM4+Jlh0gB3Gh)~Al`<_9-~j0yyL7!)5#Gl0J~0?=sa48%?U
zPldv;f$=+*4y{y<TI;5w3pLJhuk1`p`>KONLo3u<m-{B`O+{J_k{qnc<HgogPVHU#
z{6(w5mCkD<`F3<Gu{K9giyp=t0o%c<>ydd+)UbV23~(t44WdaZXPC+v)Bn8e?QD?M
zpg5BiX~q$x*zb!*<A?6eFR61kT2N2>spyYvDyN6lTzE9&d!dDw35KWYdk+<6vP6zQ
ze2jV*Pu#i5PPI4mQrAPYfl-V3YG|VxMWlO_$1gZq4Z1sJeE;*dvOA>DY_VA^XEirw
zvm#quO?eMYbakw#qw*(TMgxtRu(u}aK7HQQPHG^TnZ**F)K?aNEHG8V@Xlntz=AjL
z4n%bI4Z`lE8>F$(e*`#M!n!F|eX+om`&>?;0IyuPg?&RPip|DGo~<K_nzTkV(YMK#
z4pAF8g8Gl65)v$5qUaZW<y*o~UjpQ(=uLfK(L23*3VkCO-18)1`v<RuIn&NRfR=|0
zy+Gv{_s>PsYTO)U1U}9*NMGHTFE&e*4Tm4+3+G~g_tA^|91~U;>MtwfN}UiUHmH%c
z?7~Ei=YuTyu~2k0K1-zCKaVxceelr}ebP!f01WlI+hVo0w<N{`Gh6E7F{k$BDFj9j
z+N@8vw{VhlY=lI&iaM6KzswdG8FgnPYX^d*8C3Qgl8nv0`Nh(d`c<HEx<-wmDK1cs
ztNr4*aygv&D>FwNW;Gb|WDD0hGFv&0S=w}k00<a?ov&tY(XH4mzk|y6cgTjXeg>Qn
zXRZ7r^Wx$LHAY6{!`R%j35uY_2@pjcTYe1Ms`76V$?)irj1bvZ{a^}8eS9}?S3%Nu
z3!^C9v3C#`m&R$YfMb@)NxFP_UYecVz4<bOMLz;qBX^ED50QA++1pg|{bGSjuhZ^y
zfA0*bb73BNQ*nohZ`2dqpSictA+<g=$RX}k?bB~p$>8eM+!AOtXfJYWqC@rgD62U;
zw`q3JXzl6cxYJxkgIc=Ngh;)%?AtOa&^RJDb1qYxChqNvt}SUeDg|#55F@q<F~R3X
z1X<~%YMMUWcPO1(OvK5&u&x609<#9I8-leali?j>l3d%_C3n5|&}wm?sQS6N#odw`
zQR|4c{lG@%CplIhbAT$wfEvSd(GtOL?x<F$yWp+SgfUhWU*n6WyY)SfgK^iKO^Y`9
zSkdG2F-v$dJKir@HM)JO-kHG2?z3qZEtVKi;C7cN3VHT`HH=i*X;&H`z)m+lA#fQB
z&AJ9Z0@3N_+~P4o5GdWYOYCsf-UQ>evui*p&A6~)BStBjm==dFji#$398DZ3+YEnA
z2WJ=n7hjyban=UNxkp4PLXuK}tMqvJf#9w1*VGAtB#^tiG%5~Yl=KpFL0Cqa1P$0)
z{HpsK;V;2tlL}C77rw1Liczv^*HvRcm>Uc!`w56UyoaLt$|bH$6o<4+43qyUU%fOq
zzt)p^9LSlgE-lcICFFs^v}zBGvL;4^l+9=6)ar%t2{a9}e<usKJ}%ROza}D<HYrj|
zt`5W~*Gi_e;atR-AYTSXxmi9;!^nMVhnS9V?M1&CC}Gz!HN?XGNHrxw{6va~E8Q2$
z(;RJv0f{1WbeQg|wW&m0M`ZP{+_(j!#MUYx(=L7uv3~|S{v6<4kYo&5HE+K%{&GMT
zxb<6X+@#^f%%`Q7U1nM!)0O>)0RTVT5tK~T0St#72;A`qlTZopZ%9GnV)?&QyEH+D
z?J2|EWkiB&{NF%_fxKQk;0N4r0=H<<3mL#L#ZW3mS(8Hf-xWeT_Qm+8Ic9vHIU~&4
zYEzv=pZ~li(otWzw)8st@gqwIwQSbev)vXQdFDNpqpnk@kg2s)j=GyWY4H^Cf3We_
z(Viw1yxdmb+AwVwpA0XivzOkT-RKtD7yA)D{?j~*5))`63wGN)=ly^Ij-#E)2jM>u
z-khXyOHHh()ttZwY$6Jd=-PW*4IUfbYnDv-?|LNNBy_xoe5ss;@;mejx~W0ptQ|X%
zko9^F1(E*km=fzxB5vu>wJlY6Vo<;=nA_NuHuq`nRy>^-;2QVJ!q;5~0=zsWXd#u2
zsf+m&d=(c_-EiOJ2`QpH-74leK&4kUfi@_(5EE4y@XD=jBaw;X+HpAom2(+I`7ht~
zF)lq+4Yt@sa02Fqy9WgPzc<Q{CEST7Z6-hb0n%GTRiLh26dBUqH9aoMI%KhIeHQE6
zG=&^q)iajOw%wiNZ*rkw&<*bDO(7Gz2LJ4Hb=0CQIRBv7Hs<fsZD%}xVt!P=aqGIq
z`xio2LY<2Et7Pts@MohR{R<DtnyB)sv7#47UF2=S3-MVEs$#LyF}~TbZKqRu>{+1k
zjbtG{tHx#Lmrs3PMILUN?+F&1B1JHIZwYTwrcq$D582U~K&Z6|Y4-wf^W6=sG7(b{
zVCn9Xm4OAH{-OmD@0}GHpK@n(F20WXn5w(N-#VHCem)*VMsrJ9z3IG>c=Bu_HQGat
zO2FgVLSfr#k(%WFVfO=RD-5;vNI~gYUyR~Zf&6B8@Tz!AFE03+nKKhCc7%b-d?K!U
zKf<ItaIsw=?a@Mn(qDQoM%JW3S5(Lt8G|$L%_X>p_{^H9h+V{W?RsR~uk9G{=9n+v
z(bsJwLXo|S6c~x~E3}a8?Ms5xDD^7<JALxuuu<kd^j46Rz6^X_f{C=JQI!QQs=(di
zI<J8@D~>wzqkgB~>$qSho*XHf*BWuT?L^A-(JS?(KvGZ+94>t{DwK;tT*)GYy||EL
z-eXa}V1b;ONUsZ&ZImCRwhN|h<gi<LO>N$nz_qRpOJB7Z(e}RIl&UXfff&QAu37p*
z@Ga|$ZQ3(omErS8hW)dzfCB*@o#DXY-$XY<+uqJNSdr>$`U?M8c)Pel@;v!jdxm|q
zyfyjoIx^SFQIjy@z@O3J1R%EdOPYL_IX}uVvK^%^lLO<Cb0Sm2^DG_6b2frQ_lz2^
z*S5y5X<#lGOst#rh?#G-k9$R;a@G;oKUwU!(CdADUl{VyZyW;mZK$}QZ<na7P9<ts
zRs0Cy7;(q)gX10RV<lb3{+`4b78=HcqOQvi#9<%2!ZVnY9UL;V@R89#b9;PN=}&-j
zs&s+naW2^COv9Jr$gD=|POHT~<8=2nag053B|+<3WujM_R!pK=V!0@P?QFifofPX1
zUa*gQClugB-*XQfMW(&fpy5*&g~P~G!A7&4*7Y0GtD?m*tmdu8RV;UFYDCS8F;Y7J
z#8Y{0?TFVmv8do|pvzvaT~N5~^AB|S@qp`5YjJ#yEyl88Rt#{1N+;PrsT0q#`hIi!
zJ5a^!OUP;9S+D&70rml9ld0lI=e6B_#o43dmDoUWIhJ0vShiabMNd?bvy#Hx{FDT{
z_xakv&eKg~TD$7G&V!zXN1ElEM%O=*1AJ}6GMxUhbNY)o9}5;mIR8k7#&<5uc+=|^
zs>#`(-f1X~_yls(ht%<e-lSV8_hOH0#{o<B=T7h9tG4r1FS@c4?%?gJsjA~Q-3ZuS
zBV)8w<<v8S=90XVPO8NY64=FpdhlniEuHQ7^?cV@(D(<Zm}kud{6jSv`grWp{;bK5
z&q;UKPP-0_UzV$xw+;CS#GS?j|GbyKJTvai6?-589=U7$p`Y9OaUxAVKoQbdW$vav
zGo|t_6*&|IN+}<~^Vg?O_isA%L9APM@L)=Yw!>Z}8sohpUfL;Hz1V2~8=;Fi=UbSl
z$;QYJM<IREJzY6Y-pFuAH@Ad_-_63h&8>sA!S&Io&85yF4FyV;H+Y>EiT5C)GaXiX
z%wh_J<{12wv&E+4W4riHSD}+S|HmigX1F~H+7o1&OUiRH)K|7oG}AHw{yd`jPRwqb
z^$gh&Bl+~@HlXSF#lc0PyFJMPOC%DA%_uc5gos_5`;Xueh<5yqrN@<b-Od)}=UvVL
z3@F!fudW1kvbeTNcQx;$<Q{|6Rb+*IAD+8~3f;RRZ>SKdl0<TP955!?`U$cuIp_Hb
zEx9d(bPodeo1s?@W!&dR%07&DXD0zv4i9bnY-ClQ|Kb4*T!W&0b@p|Bv4m|zqLQHl
zRA$H7Bpkv(=Ds4XN}nEPp3bjHPyvZnbI`e8wM*#HCGy+hBcbDO4ng}vgiPPKn*0<@
z(iYlO{i+wua?DRV07xWBaQ{wZ+VA;v&pA>Ue10PhcEOo2wrHoEigHDzX7!?H%(;{w
zC^vJjUeewOzT09Zt6G~|Q<X%dYYz~&{B>pj$L5beKu+HnA${LbYu}nUg6s3loXNy0
zW|<(cvCj4~5P7f2w34y~PKc0%(q>|R_%eL8%{?QhMR(@laGDfA@u3;4ZJN#<_Moa*
zZ_{7tm%5Oo%6cz}kxwbZ=eD`gME6{d>XT<9jqPSM+I!%=(!-(X3QD3r#pBvY?X{eD
zig=kOsp?qr7VpO^y3n-4jS@6{WqtzKIeT5&d9$R$BSuqhaVt{{=iaTCY<abQoWLb;
zhHBqE5Qh)grCj|L1aHnD=qPs&W#(MPccAQ<(U&W3`RD6i5b$omVU(IZY%jJ~1vcDG
zo?%`X5T6X`1me-u^3k0}%Q8UQ*z4R2HWlgrGf)vqDtAhTZXXld*1HR%SBl{x6`mN%
z`s>fTc<mbCuXPrE-kQaLgBQ$!eq)$7#`>qszb+zpJE@lWNe#UBfY*i7cl}>CCg$Ag
zNxUH{AuSifU8A*7mqn9z@p%w_@bKLYgL1}V&uIoQK2|B>Efd?gsk&;WUOQ5w+E<G|
z`Rx<K+j}U@A3mqzB4MX0TfRQMr=g2y27C==?4YL84gQAjFE(h&jy#(*5Xf^~rI);=
zR%){Rw(*;u4Oem9+@_;^c84w+Gg%u4nQ|Xv<+l(8>648rq9^BSB*1v!Iq?46MpNEP
z-sYkjm2ufeoD+{SRfjf6SNjktfqF6b_i;1a)Meg2@Mvz?r5Dlm)uR{P9MwoOFz!yk
z(q%T5J=Nwu%JbO7*lP4Rd4srgX4-5x=u<rgYn*>U8je|}#qes4yoWBMGMn`-wx;Q8
zxVVLsxPTSKatO4LjH=d?H)@=+h@nqU9<E8Vbl}HNeG_z_Uw?0g#5i7<nwF-usGZbM
zFkJRU7!tTQ>BSe6DIFWOKl}7S|Nb3medc|)2`6)#z3ZP5t9sK(QNizb<VoTx9uF(!
zo#hE0#D9Y1`{z9S{-~`E@mxq6UUbfOBGI(-S3$GIWJiS3L|WaRZhsfw&U%*st^Hrd
zyf2CV`6DC>vC9LFa*$)@fO+nwdXA_Sx{#fIot?3IEuMBP2-?x98K$pMA&;h&YpK9_
z(%i!rac2|17rFNIOn6Rv1*KIT@^+=NRd%rRs;l#EeJM2Wk#_PV18AJjf!hIEZebpL
zw#i1&DjG2bK5N&^jQ-hS+r+^Itoz3#IT$qF(4D^OYtzkmdJ2H=adluR_*Z7+U&`1;
ztzTR>Ce8i)Q4U__H}5G{HHt#4WFwXya42jq*KuG0YkOuB2V|`M!6dq=JJ-PP3Ps-X
zfg(6lZ!SSwLD;#uaI$qyqDWsw9tQgq7}vXpOp6-SaKCmdIJlX}x;Y|Ycg}mv=)D@g
z^Nc1ON{}1vIDbZSvafXR?E#Vy(Hy_skU4e*-xr8U_w6j-K4uaHZHbNq+Pp3KVy0I2
zeUmP>vH11wN-dBqcnY^q6iCmW8mC5wkGbo0$<v&iWx)Yue-^!BO@Lnao|>6vN#I?#
zCD1}c^t$sYPqFu9BA1Ud61=Ak1nv<8Xnx3e3BCJoTGU3<@sIK}cEEbbs<Vn-NBk!H
z(6syH@y@cbd^Oy3sf+g{NgkEhA)(!8tp<JMwLFiO_td6X7*teUL%=$^)_r(F83wXD
zCGi{-cdV#=I^#iR1p|Al2WGQTF|lSa0`A_^3p}B(BP-D=Ja@FQZ}2yhvM65JyYQvq
zPsyO;yG3Rs&`@_gJz&8iBDHHRz_FjVN^p;JGTPM-T$yV$C>_@ix%&Lvpx{>UgNJqi
zj61C{JYA25#g|pW%$!1&j{oRe&!PTHYE%CG>`8x7&jf$t(FKtCn?gWZ9)CNqVLb@!
znbWA^`~08RNdMOwm#AhdT8S!?o4bDs?M5xXTvD-+2yL>j5dvBt|KS^-)wvRW{d3j7
z{Z^UwjHS{T)xS7m9q*TFVb@0F_-p(-pc8KQZ&@vcYHh=RYw6P%W3~kY|3py069DdS
z1|nlQ;E#zopfwF8%PD}8<J-{0nd^!OiDx8#rlM~e-DQ^HN{1vsXKLYRdyFFa`VB$H
zgGf<8cbSS&6t3d%vmGi6=bjXS0*y*Ex!x%U;d(!6z+Weo0Z^M`$wnL$Y*Av05ov@P
z12IT9RcuF~8D=4l5}G5g0H?Ogf<o)pkyL3YMwfnjUtg5Arqo&>Q0p<Z{Y(;$H&nxN
z_`c4Zi3p5bLuUyn970Gxj+WI~e-JwmXor>vkKxQTn}`?ni*!N9uyM_5TpF;12k9|Q
z?HC1rL5IkjXqygXj{^6(qB}-;SfW23KQM}V2{ZiFVjC$a{$Uv?6-Z0hEW^3zP`qux
zrR>(&SS>9DN@yg_Nz|bQM9)>g@LyjwG-@UVtIG6=T*ip@g^dJwzZ#of25k{)u1Ds~
ztbyT^^B0-M-0i|Cu!ipP^R@z#vjoF)RQvN3b3KM14_-|qjAX`e9)@`nK%3R;^%F2=
z9xViy0oOXW$&jr)MazSc*f0;};LQY>{IYX36s@#HX3<qDq)-bji!dS!JZAZj_@hVR
zVPF)L7;tyzOYmHT^#yZm3t&9Zef0BX3N9+I_4yz^PJqJmc``dNo_t7W)Tp;JhD#@e
z;=A*SJZax|!p0SFkyBFD>!!JkS6&_1zvzj2d7QWU)aAs1hRUSlW3|_S+iYdu9ib`7
zs|aq@oHs@%+{_u@PX@2X&#T3gs849#d0~EkJ$9yJ(dNiP<3=bdNlw7_0(bgM{-hlN
zk~S0J%m+tf@g^v`nXHh$1sE4fJLk4ycwnDGx{d<lbSE=oX<`aJ^5p1B@DB;e>DuEm
zx)qAHd$7S+lJIB?b4-}*r!iHDtT9h;?`|}tkr~wT+w-rs1kbu80{2ydd#~@!6_U?*
zi#FdzYk$J<{B19z!-fdZ5aQS`WF~z$lBxi0x%9Q;sPTP0QSzc`Z*A*zxY&dME>3Z;
zUWeRN=Ll%N646V|8{2*%UlF_xB(Hepp@;fwnMdZjM&IX4!xNuh^k{yd6VO=q%CtIU
zn7tWz6}rl|<Hu7RmxDxt`a<E;^5Vwa6Ei6mPIb*m)hM2RAe2-3b7N5Ndx8GA>$QRC
zaV%<yn`k1I)mo=@X-EQhV;PIeCMNi90}Js$WA}P&-?4|g{RLO+?&$2T;KA!sAh4Ap
z7}WiSS(Bno>n<!Xznyw*#*xH3e-b;W+TAm{wR|L-HF5ni^WrI*#l$KPts&!)^Q2lE
zMHr~2YuuIKiV#gbL71Doxs~*UqTOd)rz$RZJF1O-%IqT<=R|7XQL9(DnLLtU7AFHK
z6PW??ulvUC?^ywDmL9XCMd9@0R)&jT1V^G*_m(a640?Jo=Wmcf=J}Hoj8N?z(cR{A
zZKvUGU0&?^1iQO(Vhs%6W28cEws_F}Ik_=`)f`y6OlMo86+f+xZCBq#vdajXM!>mJ
z{Fa_t@=v$3e0%RX`2vhieN)~1IFVQE{@gb^JKH$83AmwWh(y2;aaOnuD6afJ6>QMI
aKoU<d#TV)`5hsx!!193Y{(`-XOaBGF1nQgs

literal 0
HcmV?d00001

diff --git a/charts/apps/gitea/templates/deployment.yaml b/charts/apps/gitea/templates/deployment.yaml
index 5225374..7c6de86 100644
--- a/charts/apps/gitea/templates/deployment.yaml
+++ b/charts/apps/gitea/templates/deployment.yaml
@@ -1,23 +1,23 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: '{{ .Release.Name }}'
+  name: "{{ .Release.Name }}"
 spec:
   strategy:
     type: Recreate
   replicas: 1
   selector:
     matchLabels:
-      app: '{{ .Release.Name }}'
+      app: "{{ .Release.Name }}"
   template:
     metadata:
       labels:
-        app: '{{ .Release.Name }}'
+        app: "{{ .Release.Name }}"
     spec:
       containers:
-        - name: '{{ .Release.Name }}'
-          image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
-          imagePullPolicy: '{{ .Values.image.pullPolicy }}'
+        - name: "{{ .Release.Name }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
           ports:
             - name: http
               containerPort: 3000
@@ -36,64 +36,66 @@ spec:
               name: data
           env:
             - name: TZ
-              value: '{{ .Values.globals.timezone }}'
+              value: "{{ .Values.globals.timezone }}"
             - name: USER_UID
-              value: '1000'
+              value: "1000"
             - name: USER_GID
-              value: '1000'
+              value: "1000"
+            - name: GITEA__server__SSH_DOMAIN
+              value: gitea-ssh.olsen.cloud
             - name: GITEA__service__REQUIRE_EXTERNAL_REGISTRATION_PASSWORD
-              value: 'true'
+              value: "true"
             #- name: GITEA__service__ENABLE_BASIC_AUTHENTICATION
             #  value: 'true'
             - name: GITEA__service__ENABLE_PASSWORD_SIGNIN_FORM
-              value: 'false'
+              value: "false"
             - name: GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE
-              value: 'true'
+              value: "true"
             - name: GITEA__service__DEFAULT_USER_IS_RESTRICTED
-              value: 'true'
+              value: "true"
             - name: GITEA__service__DEFAULT_USER_VISIBILITY
-              value: 'private'
+              value: "private"
             - name: GITEA__service__DEFAULT_ORG_VISIBILITY
-              value: 'private'
+              value: "private"
             - name: GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION
-              value: 'true'
+              value: "true"
             - name: GITEA__other__SHOW_FOOTER_POWERED_BY
-              value: 'false'
+              value: "false"
             - name: GITEA__other__SHOW_FOOTER_TEMPLATE_LOAD_TIME
-              value: 'false'
+              value: "false"
             - name: GITEA__other__SHOW_FOOTER_VERSION
-              value: 'false'
+              value: "false"
             - name: GITEA__repository__ENABLE_PUSH_CREATE_USER
-              value: 'true'
+              value: "true"
             - name: GITEA__repository__ENABLE_PUSH_CREATE_ORG
-              value: 'true'
+              value: "true"
             - name: GITEA__openid__ENABLE_OPENID_SIGNIN
-              value: 'false'
+              value: "false"
             - name: GITEA__openid__ENABLE_OPENID_SIGNUP
-              value: 'false'
+              value: "false"
             - name: GITEA__database__DB_TYPE
               value: postgres
             - name: GITEA__database__NAME
               valueFrom:
                 secretKeyRef:
-                  name: '{{ .Release.Name }}-pg-connection'
+                  name: "{{ .Release.Name }}-pg-connection"
                   key: database
             - name: GITEA__database__HOST
               valueFrom:
                 secretKeyRef:
-                  name: '{{ .Release.Name }}-pg-connection'
+                  name: "{{ .Release.Name }}-pg-connection"
                   key: host
             - name: GITEA__database__USER
               valueFrom:
                 secretKeyRef:
-                  name: '{{ .Release.Name }}-pg-connection'
+                  name: "{{ .Release.Name }}-pg-connection"
                   key: user
             - name: GITEA__database__PASSWD
               valueFrom:
                 secretKeyRef:
-                  name: '{{ .Release.Name }}-pg-connection'
+                  name: "{{ .Release.Name }}-pg-connection"
                   key: password
       volumes:
         - name: data
           persistentVolumeClaim:
-            claimName: '{{ .Release.Name }}-data'
+            claimName: "{{ .Release.Name }}-data"
diff --git a/charts/apps/home-assistant/Chart.yaml b/charts/apps/home-assistant/Chart.yaml
new file mode 100644
index 0000000..a245983
--- /dev/null
+++ b/charts/apps/home-assistant/Chart.yaml
@@ -0,0 +1,3 @@
+apiVersion: v2
+version: 1.0.0
+name: home-assistant
diff --git a/charts/apps/home-assistant/templates/deployment.yaml b/charts/apps/home-assistant/templates/deployment.yaml
new file mode 100644
index 0000000..b0933c2
--- /dev/null
+++ b/charts/apps/home-assistant/templates/deployment.yaml
@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  strategy:
+    type: Recreate
+  replicas: 1
+  selector:
+    matchLabels:
+      app: "{{ .Release.Name }}"
+  template:
+    metadata:
+      labels:
+        app: "{{ .Release.Name }}"
+    spec:
+      hostNetwork: true
+
+      containers:
+        - name: "{{ .Release.Name }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+          env:
+            - name: TZ
+              value: "{{ .Values.globals.timezone }}"
+          ports:
+            - name: http
+              containerPort: 8123
+              protocol: TCP
+          livenessProbe:
+            tcpSocket:
+              port: http
+          readinessProbe:
+            tcpSocket:
+              port: http
+          volumeMounts:
+            - mountPath: /config
+              name: config
+          securityContext:
+            privileged: true
+      volumes:
+        - name: config
+          persistentVolumeClaim:
+            claimName: "{{ .Release.Name }}-config"
diff --git a/charts/apps/home-assistant/templates/http-service.yaml b/charts/apps/home-assistant/templates/http-service.yaml
new file mode 100644
index 0000000..89df8bf
--- /dev/null
+++ b/charts/apps/home-assistant/templates/http-service.yaml
@@ -0,0 +1,11 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: HttpService
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  environment: "{{ .Values.globals.environment }}"
+  subdomain: "{{ .Values.subdomain }}"
+  destination:
+    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
+    port:
+      number: 80
diff --git a/charts/apps/home-assistant/templates/pvc.yaml b/charts/apps/home-assistant/templates/pvc.yaml
new file mode 100644
index 0000000..8cbd0b4
--- /dev/null
+++ b/charts/apps/home-assistant/templates/pvc.yaml
@@ -0,0 +1,11 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: "{{ .Release.Name }}-config"
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "{{ .Values.globals.environment }}"
diff --git a/charts/apps/home-assistant/templates/service.yaml b/charts/apps/home-assistant/templates/service.yaml
new file mode 100644
index 0000000..2e04e50
--- /dev/null
+++ b/charts/apps/home-assistant/templates/service.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}"
+  labels:
+    app: "{{ .Release.Name }}"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8123
+      protocol: TCP
+      name: http
+  selector:
+    app: "{{ .Release.Name }}"
diff --git a/charts/apps/home-assistant/values.yaml b/charts/apps/home-assistant/values.yaml
new file mode 100644
index 0000000..e7fcbbf
--- /dev/null
+++ b/charts/apps/home-assistant/values.yaml
@@ -0,0 +1,8 @@
+globals:
+  environment: prod
+  timezone: Europe/Amsterdam
+image:
+  repository: ghcr.io/home-assistant/home-assistant
+  tag: stable
+  pullPolicy: IfNotPresent
+subdomain: home-assistant
diff --git a/charts/apps/music-assistant/Chart.yaml b/charts/apps/music-assistant/Chart.yaml
new file mode 100644
index 0000000..274c312
--- /dev/null
+++ b/charts/apps/music-assistant/Chart.yaml
@@ -0,0 +1,3 @@
+apiVersion: v2
+version: 1.0.0
+name: music-assistant
diff --git a/charts/apps/music-assistant/templates/deployment.yaml b/charts/apps/music-assistant/templates/deployment.yaml
new file mode 100644
index 0000000..2014210
--- /dev/null
+++ b/charts/apps/music-assistant/templates/deployment.yaml
@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  strategy:
+    type: Recreate
+  replicas: 1
+  selector:
+    matchLabels:
+      app: "{{ .Release.Name }}"
+  template:
+    metadata:
+      labels:
+        app: "{{ .Release.Name }}"
+    spec:
+      hostNetwork: true
+
+      containers:
+        - name: "{{ .Release.Name }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+          ports:
+            - name: http
+              containerPort: 8095
+              protocol: TCP
+          livenessProbe:
+            tcpSocket:
+              port: http
+          readinessProbe:
+            tcpSocket:
+              port: http
+          volumeMounts:
+            - mountPath: /data
+              name: data
+          securityContext:
+            capabilities:
+              add:
+                - SYS_ADMIN
+                - DAC_READ_SEARCH
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: "{{ .Release.Name }}-data"
diff --git a/charts/apps/music-assistant/templates/http-service.yaml b/charts/apps/music-assistant/templates/http-service.yaml
new file mode 100644
index 0000000..89df8bf
--- /dev/null
+++ b/charts/apps/music-assistant/templates/http-service.yaml
@@ -0,0 +1,11 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: HttpService
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  environment: "{{ .Values.globals.environment }}"
+  subdomain: "{{ .Values.subdomain }}"
+  destination:
+    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
+    port:
+      number: 80
diff --git a/charts/apps/music-assistant/templates/pvc.yaml b/charts/apps/music-assistant/templates/pvc.yaml
new file mode 100644
index 0000000..aeca898
--- /dev/null
+++ b/charts/apps/music-assistant/templates/pvc.yaml
@@ -0,0 +1,11 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: "{{ .Release.Name }}-data"
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "{{ .Values.globals.environment }}"
diff --git a/charts/apps/music-assistant/templates/service.yaml b/charts/apps/music-assistant/templates/service.yaml
new file mode 100644
index 0000000..aa43db4
--- /dev/null
+++ b/charts/apps/music-assistant/templates/service.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}"
+  labels:
+    app: "{{ .Release.Name }}"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 8095
+      protocol: TCP
+      name: http
+  selector:
+    app: "{{ .Release.Name }}"
diff --git a/charts/apps/music-assistant/values.yaml b/charts/apps/music-assistant/values.yaml
new file mode 100644
index 0000000..daca896
--- /dev/null
+++ b/charts/apps/music-assistant/values.yaml
@@ -0,0 +1,7 @@
+globals:
+  environment: prod
+image:
+  repository: ghcr.io/music-assistant/server
+  tag: latest
+  pullPolicy: IfNotPresent
+subdomain: music-assistant
diff --git a/charts/apps/photoprism/Chart.yaml b/charts/apps/photoprism/Chart.yaml
new file mode 100644
index 0000000..00f15a7
--- /dev/null
+++ b/charts/apps/photoprism/Chart.yaml
@@ -0,0 +1,3 @@
+apiVersion: v2
+version: 1.0.0
+name: photoprism
diff --git a/charts/apps/photoprism/templates/client.yaml b/charts/apps/photoprism/templates/client.yaml
new file mode 100644
index 0000000..3aa633c
--- /dev/null
+++ b/charts/apps/photoprism/templates/client.yaml
@@ -0,0 +1,10 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: OidcClient
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  environment: "{{ .Values.globals.environment }}"
+  redirectUris:
+    - path: /api/v1/oidc/redirect
+      subdomain: "{{ .Values.subdomain }}"
+      matchingMode: strict
diff --git a/charts/apps/photoprism/templates/deployment.yaml b/charts/apps/photoprism/templates/deployment.yaml
new file mode 100644
index 0000000..1bf7618
--- /dev/null
+++ b/charts/apps/photoprism/templates/deployment.yaml
@@ -0,0 +1,92 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  strategy:
+    type: Recreate
+  replicas: 1
+  selector:
+    matchLabels:
+      app: "{{ .Release.Name }}"
+  template:
+    metadata:
+      labels:
+        app: "{{ .Release.Name }}"
+    spec:
+      containers:
+        - name: "{{ .Release.Name }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+          env:
+            - name: PHOTOPRISM_UPLOAD_NSFW
+              value: "true"
+            - name: PHOTOPRISM_SITE_URL
+              value: "https://{{ .Values.subdomain }}.olsen.cloud" #TODO
+            # - name: PHOTOPRISM_UID
+            #   value: "1000"
+            # - name: PHOTOPRISM_GID
+            #   value: "1000"
+            # - name: PHOTOPRISM_DISABLE_CHOWN
+            #   value: "true"
+            - name: PHOTOPRISM_AUTH_MODE
+              value: password
+            - name: PHOTOPRISM_DISABLE_TLS
+              value: "false"
+            - name: PHOTOPRISM_READONLY
+              value: "false"
+            - name: PHOTOPRISM_HTTP_COMPRESSION
+              value: "gzip"
+
+            - name: PHOTOPRISM_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: "{{ .Release.Name }}-secrets"
+                  key: password
+            - name: PHOTOPRISM_OIDC_SCOPES
+              value: "openid email profile offline_access"
+            - name: PHOTOPRISM_OIDC_PROVIDER
+              value: Authentik
+            - name: PHOTOPRISM_OIDC_ICON
+              value: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
+            - name: PHOTOPRISM_OIDC_REGISTER
+              value: "true"
+            - name: PHOTOPRISM_OIDC_REDIRECT
+              value: "false"
+            - name: PHOTOPRISM_OIDC_CLIENT
+              valueFrom:
+                secretKeyRef:
+                  name: "{{ .Release.Name }}-client"
+                  key: clientId
+            - name: PHOTOPRISM_OIDC_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: "{{ .Release.Name }}-client"
+                  key: clientSecret
+            - name: PHOTOPRISM_OIDC_URI
+              valueFrom:
+                secretKeyRef:
+                  name: "{{ .Release.Name }}-client"
+                  key: configurationIssuer
+          ports:
+            - name: http
+              containerPort: 2342
+              protocol: TCP
+          livenessProbe:
+            tcpSocket:
+              port: http
+          readinessProbe:
+            tcpSocket:
+              port: http
+          volumeMounts:
+            - mountPath: /photoprism/storage
+              name: data
+            - mountPath: /photoprism/originals
+              name: originals
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: "{{ .Release.Name }}-data"
+        - name: originals
+          persistentVolumeClaim:
+            claimName: pictures
diff --git a/charts/apps/photoprism/templates/external-http-service.yaml b/charts/apps/photoprism/templates/external-http-service.yaml
new file mode 100644
index 0000000..e28916d
--- /dev/null
+++ b/charts/apps/photoprism/templates/external-http-service.yaml
@@ -0,0 +1,11 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: ExternalHttpService
+metadata:
+  name: '{{ .Release.Name }}'
+spec:
+  environment: '{{ .Values.globals.environment }}'
+  subdomain: '{{ .Values.subdomain }}'
+  destination:
+    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
+    port:
+      number: 80
diff --git a/charts/apps/photoprism/templates/http-service.yaml b/charts/apps/photoprism/templates/http-service.yaml
new file mode 100644
index 0000000..89df8bf
--- /dev/null
+++ b/charts/apps/photoprism/templates/http-service.yaml
@@ -0,0 +1,11 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: HttpService
+metadata:
+  name: "{{ .Release.Name }}"
+spec:
+  environment: "{{ .Values.globals.environment }}"
+  subdomain: "{{ .Values.subdomain }}"
+  destination:
+    host: "{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local"
+    port:
+      number: 80
diff --git a/charts/apps/photoprism/templates/pvc.yaml b/charts/apps/photoprism/templates/pvc.yaml
new file mode 100644
index 0000000..aeca898
--- /dev/null
+++ b/charts/apps/photoprism/templates/pvc.yaml
@@ -0,0 +1,11 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: "{{ .Release.Name }}-data"
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  resources:
+    requests:
+      storage: "1Gi"
+  storageClassName: "{{ .Values.globals.environment }}"
diff --git a/charts/apps/photoprism/templates/secret.yaml b/charts/apps/photoprism/templates/secret.yaml
new file mode 100644
index 0000000..6e8ed5b
--- /dev/null
+++ b/charts/apps/photoprism/templates/secret.yaml
@@ -0,0 +1,9 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: GenerateSecret
+metadata:
+  name: "{{ .Release.Name }}-secrets"
+spec:
+  fields:
+    - name: password
+      encoding: base64
+      length: 64
diff --git a/charts/apps/photoprism/templates/service.yaml b/charts/apps/photoprism/templates/service.yaml
new file mode 100644
index 0000000..2162563
--- /dev/null
+++ b/charts/apps/photoprism/templates/service.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: "{{ .Release.Name }}"
+  labels:
+    app: "{{ .Release.Name }}"
+spec:
+  type: ClusterIP
+  ports:
+    - port: 80
+      targetPort: 2342
+      protocol: TCP
+      name: http
+  selector:
+    app: "{{ .Release.Name }}"
diff --git a/charts/apps/photoprism/values.yaml b/charts/apps/photoprism/values.yaml
new file mode 100644
index 0000000..a22558f
--- /dev/null
+++ b/charts/apps/photoprism/values.yaml
@@ -0,0 +1,7 @@
+globals:
+  environment: prod
+image:
+  repository: photoprism/photoprism
+  tag: latest
+  pullPolicy: IfNotPresent
+subdomain: photoprism
diff --git a/charts/backup/templates/cron-job-backup.yaml b/charts/backup/templates/cron-job-backup.yaml
index 7125acf..5b249fc 100644
--- a/charts/backup/templates/cron-job-backup.yaml
+++ b/charts/backup/templates/cron-job-backup.yaml
@@ -15,6 +15,9 @@ spec:
   jobTemplate:
     spec:
       template:
+        metadata:
+          annotations:
+            sidecar.istio.io/inject: "false"
         spec:
           containers:
             - name: "{{ $release.Name }}-{{ $key }}-backup"
diff --git a/charts/backup/templates/cron-job-cleanup.yaml b/charts/backup/templates/cron-job-cleanup.yaml
index 3582ad0..b671a9a 100644
--- a/charts/backup/templates/cron-job-cleanup.yaml
+++ b/charts/backup/templates/cron-job-cleanup.yaml
@@ -15,6 +15,9 @@ spec:
   jobTemplate:
     spec:
       template:
+        metadata:
+          annotations:
+            sidecar.istio.io/inject: "false"
         spec:
           containers:
             - name: "{{ $release.Name }}-{{ $key }}-cleanup"