chore(deps): update ghcr.io/morten-olsen/homelab-operator:main docker digest to c92eea7

2026-02-08 01:36:28 +01:00 · 2025-09-23 02:09:19 +00:00
45 changed files with 129 additions and 518 deletions
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -27,9 +27,9 @@ jobs:
    name: Build
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v4

-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v4
        with:
          node-version: "${{ env.NODE_VERSION }}"
          registry-url: "${{ env.NODE_REGISTRY }}"
@@ -81,7 +81,7 @@ jobs:
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v4

      - name: Upload Release Asset
        id: upload-release-asset
--- a/.github/workflows/publish-backup-tag.yml
+++ b/.github/workflows/publish-backup-tag.yml
@@ -31,7 +31,7 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

@@ -58,7 +58,7 @@ jobs:
          labels: ${{ steps.meta.outputs.labels }}

      - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v2
        with:
          subject-name: ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME}}
          subject-digest: ${{ steps.push.outputs.digest }}
--- a/.github/workflows/publish-tag.yml
+++ b/.github/workflows/publish-tag.yml
@@ -31,7 +31,7 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

@@ -58,7 +58,7 @@ jobs:
          labels: ${{ steps.meta.outputs.labels }}

      - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v2
        with:
          subject-name: ${{ env.DOCKER_REGISTRY }}/${{ env.IMAGE_NAME}}
          subject-digest: ${{ steps.push.outputs.digest }}
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -8,9 +8,9 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v4
      - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.3.6
+        uses: renovatebot/github-action@v40.2.2
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          configurationFile: ./renovate.json5
--- a/charts/apps/audiobookshelf/values.yaml
+++ b/charts/apps/audiobookshelf/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/advplyr/audiobookshelf
-  tag: 2.29.0@sha256:dd4a3079d26bfe9f0ea63de3e3eff483dfa25fef05ef850a5a9d121dca3794b2
+  tag: 2.26.1@sha256:5901162ccdf4b44f563ff2012484d5e315d9a1ecd6af86f7fe605ec96bbc5039
  pullPolicy: IfNotPresent
 subdomain: audiobookshelf
--- a/charts/apps/data/Chart.yaml
+++ b/charts/apps/data/Chart.yaml
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: data
--- a/charts/apps/data/templates/database.yaml
+++ b/charts/apps/data/templates/database.yaml
@@ -1,6 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: PostgresDatabase
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
--- a/charts/apps/data/values.yaml
+++ b/charts/apps/data/values.yaml
@@ -1,2 +0,0 @@
-globals:
-  environment: prod
--- a/charts/apps/esphome/values.yaml
+++ b/charts/apps/esphome/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: ghcr.io/esphome/esphome
-  tag: latest@sha256:67f4df2206af244e79c6c624ea7ef27be572f83af981657b1ac1ffa0d7b8487a
+  tag: latest@sha256:393775c4c02e0b09d086cd794815a723f90d4af7c3d871935e22be1a34c5d89a
  pullPolicy: IfNotPresent
 subdomain: esphome
--- a/charts/apps/homarr/values.yaml
+++ b/charts/apps/homarr/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/homarr-labs/homarr
-  tag: latest@sha256:9ba9831d43347b6d66143a0754c97b9790a2ffe9bdf5004083668864b3328e65
+  tag: latest@sha256:7d58149aa544037d173a48f41fbde86706068d2b8933a33a911dce26457ecf16
  pullPolicy: IfNotPresent
 subdomain: homarr
--- a/charts/apps/linkwarden/Chart.yaml
+++ b/charts/apps/linkwarden/Chart.yaml
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: Linkwarden
--- a/charts/apps/linkwarden/templates/client.yaml
+++ b/charts/apps/linkwarden/templates/client.yaml
@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  redirectUris:
-    - path: /api/v1/auth/callback/authentik
-      subdomain: "{{ .Values.subdomain }}"
-      matchingMode: strict
--- a/charts/apps/linkwarden/templates/database.yaml
+++ b/charts/apps/linkwarden/templates/database.yaml
@@ -1,6 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: PostgresDatabase
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
--- a/charts/apps/linkwarden/templates/deployment.yaml
+++ b/charts/apps/linkwarden/templates/deployment.yaml
@@ -1,75 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - containerPort: 3000
-              name: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: NEXTAUTH_URL
-              value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}/api/v1/auth"
-            - name: NEXT_PUBLIC_OLLAMA_ENDPOINT_URL
-              value: "http://ollama:80"
-            - name: OLLAMA_MODEL
-              value: phi3:mini-4k
-            - name: DATABASE_URL
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
-                  key: url
-            - name: NEXTAUTH_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-secrets"
-                  key: nextauth
-            - name: NEXT_PUBLIC_DISABLE_REGISTRATION
-              value: "true"
-            - name: NEXT_PUBLIC_CREDENTIALS_ENABLED
-              value: "false"
-            - name: DISABLE_NEW_SSO_USERS
-              value: "false"
-            - name: NEXT_PUBLIC_AUTHENTIK_ENABLED
-              value: "true"
-            - name: AUTHENTIK_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-            - name: AUTHENTIK_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-            - name: AUTHENTIK_ISSUER
-              value: "https://authentik.{{ .Values.globals.domain }}/application/o/linkwarden"
-              # TODO:
-            # - name: AUTHENTIK_ISSUER
-            #   valueFrom:
-            #     secretKeyRef:
-            #       name: "{{ .Release.Name }}-client"
-            #       key: configurationIssuer
-          volumeMounts:
-            - mountPath: /data/data
-              name: data
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
--- a/charts/apps/linkwarden/templates/external-http-service.yaml
+++ b/charts/apps/linkwarden/templates/external-http-service.yaml
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80
--- a/charts/apps/linkwarden/templates/http-service.yaml
+++ b/charts/apps/linkwarden/templates/http-service.yaml
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80
--- a/charts/apps/linkwarden/templates/pvc.yaml
+++ b/charts/apps/linkwarden/templates/pvc.yaml
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'
--- a/charts/apps/linkwarden/templates/secret.yaml
+++ b/charts/apps/linkwarden/templates/secret.yaml
@@ -1,9 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-secrets"
-spec:
-  fields:
-    - name: nextauth
-      encoding: hex
-      length: 64
--- a/charts/apps/linkwarden/templates/service.yaml
+++ b/charts/apps/linkwarden/templates/service.yaml
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 3000
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"
--- a/charts/apps/linkwarden/values.yaml
+++ b/charts/apps/linkwarden/values.yaml
@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  domain: olsen.cloud
-  timezone: Europe/Amsterdam
-image:
-  repository: ghcr.io/linkwarden/linkwarden
-  tag: latest@sha256:c1c6f417ea566de2c2dac6e79353ee5f40cb6a44fd9dd3970c83e6fc098de1df
-  pullPolicy: IfNotPresent
-subdomain: linkwarden
--- a/charts/apps/metamcp/templates/client.yaml
+++ b/charts/apps/metamcp/templates/client.yaml
@@ -1,10 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: OidcClient
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  redirectUris:
-    - path: /api/auth/oidc/callback
-      subdomain: '{{ .Values.subdomain }}'
-      matchingMode: strict
--- a/charts/apps/metamcp/templates/deployment.yaml
+++ b/charts/apps/metamcp/templates/deployment.yaml
@@ -1,23 +1,23 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: "{{ .Release.Name }}"
+  name: '{{ .Release.Name }}'
 spec:
  strategy:
    type: Recreate
  replicas: 1
  selector:
    matchLabels:
-      app: "{{ .Release.Name }}"
+      app: '{{ .Release.Name }}'
  template:
    metadata:
      labels:
-        app: "{{ .Release.Name }}"
+        app: '{{ .Release.Name }}'
    spec:
      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
+        - name: '{{ .Release.Name }}'
+          image: '{{ .Values.image.repository }}:{{ .Values.image.tag }}'
+          imagePullPolicy: '{{ .Values.image.pullPolicy }}'
          ports:
            - name: http
              containerPort: 12008
@@ -33,68 +33,47 @@ spec:
              name: data
          env:
            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
+              value: '{{ .Values.globals.timezone }}'
            - name: APP_URL
-              value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
+              value: https://metamcp.olsen.cloud # TODO: Change
            - name: NEXT_PUBLIC_APP_URL
-              value: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
+              value: https://metamcp.olsen.cloud # TODO: Change
            - name: BETTER_AUTH_SECRET
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-secrets"
+                  name: '{{ .Release.Name }}-secrets'
                  key: betterauth
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                  key: url
            - name: POSTGRES_DB
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                  key: database
            - name: POSTGRES_HOST
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                  key: host
            - name: POSTGRES_PORT
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                  key: port
            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                  key: user
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: "{{ .Release.Name }}-pg-connection"
+                  name: '{{ .Release.Name }}-pg-connection'
                  key: password
-            - name: OIDC_PROVIDER_ID
-              value: oidc
-            - name: OIDC_SCOPES
-              value: openid email profile
-            - name: OIDC_PKCE
-              value: "true"
-            - name: OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientId
-            - name: OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: clientSecret
-            - name: OIDC_DISCOVERY_URL
-              valueFrom:
-                secretKeyRef:
-                  name: "{{ .Release.Name }}-client"
-                  key: configuration
      volumes:
        - name: data
          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
+            claimName: '{{ .Release.Name }}-data'
--- a/charts/apps/metamcp/values.yaml
+++ b/charts/apps/metamcp/values.yaml
@@ -1,9 +1,8 @@
 globals:
  environment: prod
-  domain: olsen.cloud
  timezone: Europe/Amsterdam
 image:
  repository: ghcr.io/metatool-ai/metamcp
-  tag: latest@sha256:009c6354d55a7ff0df484c8109ac5ae241484e6fb6f7f09318dfeeba384108ac
+  tag: latest@sha256:09e467e3ac40132f4ee11407e792ca5767894b0909d56c270223bdfe64dfcfd2
  pullPolicy: IfNotPresent
 subdomain: metamcp
--- a/charts/apps/miniflux/values.yaml
+++ b/charts/apps/miniflux/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: ghcr.io/miniflux/miniflux
-  tag: latest@sha256:fd6587a23884c277301307e4d70c196cd0f772fba1720b9e60051fc65a75121e
+  tag: latest@sha256:b435a1ea2408f996c8d4c00c4f46523fa9203971ee1e85b1fe7ad3f0e7ae617f
  pullPolicy: IfNotPresent
 subdomain: miniflux
--- a/charts/apps/mqtt/templates/config.yaml
+++ b/charts/apps/mqtt/templates/config.yaml
@@ -8,5 +8,5 @@ data:
  mosquitto.conf: |
    persistence true
    persistence_location /mosquitto/data/
-    listener 1883 0.0.0.0
+    listener 1884 0.0.0.0
    allow_anonymous true
--- a/charts/apps/mqtt/templates/deployment.yaml
+++ b/charts/apps/mqtt/templates/deployment.yaml
@@ -27,7 +27,7 @@ spec:
              command:
                - sh
                - -c
-                - mosquitto_pub -h localhost -p 1883 -t health/ready -m "ready" -q 0 -i readiness_client -V 5
+                - mosquitto_pub -h localhost -p 1884 -t health/ready -m "ready" -q 0 -i readiness_client -V 5
            initialDelaySeconds: 10 # Give broker time to start
            periodSeconds: 20 # Check every 20 seconds
            timeoutSeconds: 5 # Fail if command takes longer than 5 seconds
@@ -37,7 +37,7 @@ spec:
              command:
                - sh
                - -c
-                - mosquitto_pub -h localhost -p 1883 -t health/ready -m "ready" -q 0 -i readiness_client -V 5
+                - mosquitto_pub -h localhost -p 1884 -t health/ready -m "ready" -q 0 -i readiness_client -V 5
            initialDelaySeconds: 15
            periodSeconds: 20
            timeoutSeconds: 5
--- a/charts/apps/mqtt/templates/http-service.yaml
+++ b/charts/apps/mqtt/templates/http-service.yaml
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 1883
--- a/charts/apps/mqtt/templates/service.yaml
+++ b/charts/apps/mqtt/templates/service.yaml
@@ -5,7 +5,7 @@ metadata:
  labels:
    app: "{{ .Release.Name }}"
 spec:
-  type: LoadBalancer
+  type: ClusterIP
  ports:
    - port: 1883
      targetPort: 1883
--- a/charts/apps/n8n/values.yaml
+++ b/charts/apps/n8n/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: docker.n8n.io/n8nio/n8n
-  tag: latest@sha256:4a159553c22d41f6167c7ddf01e4078c97726af863eae59579f3b2d9e8b12fe2
+  tag: latest@sha256:c5fe3ff0b79f7831dc21f9c709bdb7eee4fff4453a28ce84c8e9fa5b9f562686
  pullPolicy: IfNotPresent
 subdomain: n8n
--- a/charts/apps/nocodb/Chart.yaml
+++ b/charts/apps/nocodb/Chart.yaml
@@ -1,3 +0,0 @@
-apiVersion: v2
-version: 1.0.0
-name: nocodb
--- a/charts/apps/nocodb/templates/deployment.yaml
+++ b/charts/apps/nocodb/templates/deployment.yaml
@@ -1,33 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: "{{ .Release.Name }}"
-  template:
-    metadata:
-      labels:
-        app: "{{ .Release.Name }}"
-    spec:
-      containers:
-        - name: "{{ .Release.Name }}"
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
-          imagePullPolicy: "{{ .Values.image.pullPolicy }}"
-          ports:
-            - containerPort: 8080
-              name: http
-          env:
-            - name: TZ
-              value: "{{ .Values.globals.timezone }}"
-            - name: PUID
-            - mountPath: /usr/app/data/
-              name: data
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: "{{ .Release.Name }}-data"
--- a/charts/apps/nocodb/templates/external-http-service.yaml
+++ b/charts/apps/nocodb/templates/external-http-service.yaml
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: ExternalHttpService
-metadata:
-  name: '{{ .Release.Name }}'
-spec:
-  environment: '{{ .Values.globals.environment }}'
-  subdomain: '{{ .Values.subdomain }}'
-  destination:
-    host: '{{ .Release.Name }}.{{ .Release.Namespace }}.svc.cluster.local'
-    port:
-      number: 80
--- a/charts/apps/nocodb/templates/http-service.yaml
+++ b/charts/apps/nocodb/templates/http-service.yaml
@@ -1,11 +0,0 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: HttpService
-metadata:
-  name: "{{ .Release.Name }}"
-spec:
-  environment: "{{ .Values.globals.environment }}"
-  subdomain: "{{ .Values.subdomain }}"
-  destination:
-    host: "{{ .Release.Name }}"
-    port:
-      number: 80
--- a/charts/apps/nocodb/templates/pvc.yaml
+++ b/charts/apps/nocodb/templates/pvc.yaml
@@ -1,11 +0,0 @@
-kind: PersistentVolumeClaim
-apiVersion: v1
-metadata:
-  name: '{{ .Release.Name }}-data'
-spec:
-  accessModes:
-    - 'ReadWriteOnce'
-  resources:
-    requests:
-      storage: '1Gi'
-  storageClassName: '{{ .Values.globals.environment }}'
--- a/charts/apps/nocodb/templates/service.yaml
+++ b/charts/apps/nocodb/templates/service.yaml
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: "{{ .Release.Name }}"
-  labels:
-    app: "{{ .Release.Name }}"
-spec:
-  type: ClusterIP
-  ports:
-    - port: 80
-      targetPort: 8080
-      protocol: TCP
-      name: http
-  selector:
-    app: "{{ .Release.Name }}"
--- a/charts/apps/nocodb/values.yaml
+++ b/charts/apps/nocodb/values.yaml
@@ -1,9 +0,0 @@
-globals:
-  environment: prod
-  domain: olsen.cloud
-  timezone: Europe/Amsterdam
-image:
-  repository: nocodb/nocodb
-  tag: latest@sha256:71d5b23640a9f5068bab26cf5b4c6a733709677a2c78664b132beaf24d766246
-  pullPolicy: IfNotPresent
-subdomain: nocodb
--- a/charts/apps/ollama/values.yaml
+++ b/charts/apps/ollama/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ollama/ollama
-  tag: 0.12.1@sha256:5aed793ab336d1aac9b132f4b46fddfcfa13b8911def3d275937c8acbd1763e8
+  tag: 0.12.0@sha256:14def4e0b9ac8c91b3ec6f7fa7684c924ffe244541d5fd827d9b89035cc33310
  pullPolicy: IfNotPresent
 subdomain: openwebui
--- a/charts/apps/openwebui/values.yaml
+++ b/charts/apps/openwebui/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/open-webui/open-webui
-  tag: main@sha256:05aaa81eb4094038a16f0ae056342e3515d1912a30e41b828bfd3731fbe36a6c
+  tag: main@sha256:2e78a2f9f6f62173ae28d2203f3c9bcdadc614023380ebbe903ea9fab772535e
  pullPolicy: IfNotPresent
 subdomain: openwebui
--- a/charts/operator/values.yaml
+++ b/charts/operator/values.yaml
@@ -6,7 +6,7 @@ image:
  repository: ghcr.io/morten-olsen/homelab-operator
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  tag: main@sha256:df20d7e4f48bd886cef63ab882de9c6df76b0b297724d1cdf3a79aba8de6f896
+  tag: main@sha256:c92eea77a0e4bc0a1626bcf1af2bed16fe41c623c6885c72f6c316023daf1b39

 imagePullSecrets: []
 nameOverride: ''
--- a/helmfile.yaml.gotmpl
+++ b/helmfile.yaml.gotmpl
@@ -1,83 +0,0 @@
-environments:
-  default: {}
---
-
-releases:
-  - name: volumes
-    chart: charts/apps/volumes
-    namespace: prod
-  - name: audiobookshelf
-    chart: charts/apps/audiobookshelf
-    namespace: prod
-  - name: baikal
-    chart: charts/apps/baikal
-    namespace: prod
-  - name: bytestash
-    chart: charts/apps/bytestash
-    namespace: prod
-  - name: calibre-web
-    chart: charts/apps/calibre-web
-    namespace: prod
-  - name: coder
-    chart: charts/apps/coder
-    namespace: prod
-  - name: data
-    chart: charts/apps/data
-    namespace: prod
-  - name: esphome
-    chart: charts/apps/esphome
-    namespace: prod
-  - name: gitea
-    chart: charts/apps/gitea
-    namespace: prod
-  - name: homarr
-    chart: charts/apps/homarr
-    namespace: prod
-  - name: home-assistant
-    chart: charts/apps/home-assistant
-    namespace: prod
-  - name: jellyfin
-    chart: charts/apps/jellyfin
-    namespace: prod
-  - name: linkwarden
-    chart: charts/apps/linkwarden
-    namespace: prod
-  - name: mealie
-    chart: charts/apps/mealie
-    namespace: prod
-  - name: metamcp
-    chart: charts/apps/metamcp
-    namespace: prod
-  - name: miniflux
-    chart: charts/apps/miniflux
-    namespace: prod
-  - name: mqtt
-    chart: charts/apps/mqtt
-    namespace: prod
-  - name: music-assistant
-    chart: charts/apps/music-assistant
-    namespace: prod
-  - name: n8n
-    chart: charts/apps/n8n
-    namespace: prod
-  - name: nocodb
-    chart: charts/apps/nocodb
-    namespace: prod
-  - name: ollama
-    chart: charts/apps/ollama
-    namespace: prod
-  - name: openwebui
-    chart: charts/apps/openwebui
-    namespace: prod
-  - name: photoprism
-    chart: charts/apps/photoprism
-    namespace: prod
-  - name: readeck
-    chart: charts/apps/readeck
-    namespace: prod
-  - name: signal
-    chart: charts/apps/signal
-    namespace: prod
-  - name: zot
-    chart: charts/apps/zot
-    namespace: prod
--- a/images/operator/package.json
+++ b/images/operator/package.json
@@ -13,7 +13,7 @@
    "eslint-plugin-prettier": "5.5.4",
    "json-schema-to-typescript": "^15.0.4",
    "prettier": "3.6.2",
-    "typescript": "5.9.2",
+    "typescript": "5.8.3",
    "typescript-eslint": "8.38.0"
  },
  "peerDependencies": {
@@ -22,7 +22,7 @@
  "dependencies": {
    "@goauthentik/api": "2025.6.3-1751754396",
    "@kubernetes/client-node": "^1.3.0",
-    "cloudflare": "^5.0.0",
+    "cloudflare": "^4.5.0",
    "cron": "^4.3.3",
    "debounce": "^2.2.0",
    "deep-equal": "^2.2.3",
@@ -31,7 +31,7 @@
    "execa": "^9.6.0",
    "knex": "^3.1.0",
    "p-queue": "^8.1.0",
-    "p-retry": "^7.0.0",
+    "p-retry": "^6.2.1",
    "pg": "^8.16.3",
    "sqlite3": "^5.1.7",
    "yaml": "^2.8.0",
@@ -43,7 +43,7 @@
    "#bootstrap/*": "./src/bootstrap/*",
    "#utils/*": "./src/utils/*"
  },
-  "packageManager": "pnpm@10.17.1",
+  "packageManager": "pnpm@10.6.0",
  "pnpm": {
    "onlyBuiltDependencies": [
      "sqlite3"
--- a/images/operator/pnpm-lock.yaml
+++ b/images/operator/pnpm-lock.yaml
@@ -4,11 +4,6 @@ settings:
  autoInstallPeers: true
  excludeLinksFromLockfile: false

-patchedDependencies:
-  '@kubernetes/client-node':
-    hash: 0b0e5d32aa2930107c8c9b45df2639faf53fa12a389a551885d6e42d71f9429d
-    path: patches/@kubernetes__client-node.patch
-
 importers:

  .:
@@ -18,10 +13,10 @@ importers:
        version: 2025.6.3-1751754396
      '@kubernetes/client-node':
        specifier: ^1.3.0
-        version: 1.3.0(patch_hash=0b0e5d32aa2930107c8c9b45df2639faf53fa12a389a551885d6e42d71f9429d)(encoding@0.1.13)
+        version: 1.3.0(encoding@0.1.13)
      cloudflare:
-        specifier: ^5.0.0
-        version: 5.1.0(encoding@0.1.13)
+        specifier: ^4.5.0
+        version: 4.5.0(encoding@0.1.13)
      cron:
        specifier: ^4.3.3
        version: 4.3.3
@@ -45,10 +40,10 @@ importers:
        version: 3.1.0(pg@8.16.3)(sqlite3@5.1.7)
      p-queue:
        specifier: ^8.1.0
-        version: 8.1.1
+        version: 8.1.0
      p-retry:
-        specifier: ^7.0.0
-        version: 7.0.0
+        specifier: ^6.2.1
+        version: 6.2.1
      pg:
        specifier: ^8.16.3
        version: 8.16.3
@@ -57,10 +52,10 @@ importers:
        version: 5.1.7
      yaml:
        specifier: ^2.8.0
-        version: 2.8.1
+        version: 2.8.0
      zod:
        specifier: ^4.0.14
-        version: 4.1.11
+        version: 4.0.14
    devDependencies:
      '@eslint/eslintrc':
        specifier: 3.3.1
@@ -79,7 +74,7 @@ importers:
        version: 10.1.8(eslint@9.32.0)
      eslint-plugin-import:
        specifier: 2.32.0
-        version: 2.32.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2))(eslint@9.32.0)
+        version: 2.32.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3))(eslint@9.32.0)
      eslint-plugin-prettier:
        specifier: 5.5.4
        version: 5.5.4(eslint-config-prettier@10.1.8(eslint@9.32.0))(eslint@9.32.0)(prettier@3.6.2)
@@ -90,11 +85,11 @@ importers:
        specifier: 3.6.2
        version: 3.6.2
      typescript:
-        specifier: 5.9.2
-        version: 5.9.2
+        specifier: 5.8.3
+        version: 5.8.3
      typescript-eslint:
        specifier: 8.38.0
-        version: 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+        version: 8.38.0(eslint@9.32.0)(typescript@5.8.3)

 packages:

@@ -252,6 +247,9 @@ packages:
  '@types/node@22.16.5':
    resolution: {integrity: sha512-bJFoMATwIGaxxx8VJPeM8TonI8t579oRvgAuT8zFugJsJZgzqv0Fu8Mhp68iecjzG7cnN3mO2dJQ5uUM2EFrgQ==}

+  '@types/retry@0.12.2':
+    resolution: {integrity: sha512-XISRgDJ2Tc5q4TRqvgJtzsRkFYNJzZrhTdtMoGVBttwzzQJkPnS3WWTFc7kuDRoPtPakl+T+OfdEUjYJj7Jbow==}
+
  '@types/stream-buffers@3.0.7':
    resolution: {integrity: sha512-azOCy05sXVXrO+qklf0c/B07H/oHaIuDDAiHPVwlk3A9Ek+ksHyTeMajLZl3r76FxpPpxem//4Te61G1iW3Giw==}

@@ -497,8 +495,8 @@ packages:
    resolution: {integrity: sha512-4diC9HaTE+KRAMWhDhrGOECgWZxoevMc5TlkObMqNSsVU62PYzXZ/SMTjzyGAFF1YusgxGcSWTEXBhp0CPwQ1A==}
    engines: {node: '>=6'}

-  cloudflare@5.1.0:
-    resolution: {integrity: sha512-J2vT90WHio8VSbGUmuHckJr9pabH6N+nQKQsgjfwydgV2bgyQoV/KqWw1Df+YKZ5T/QqP7KadKr4bxh+WiRafg==}
+  cloudflare@4.5.0:
+    resolution: {integrity: sha512-fPcbPKx4zF45jBvQ0z7PCdgejVAPBBCZxwqk1k7krQNfpM07Cfj97/Q6wBzvYqlWXx/zt1S9+m8vnfCe06umbQ==}

  color-convert@2.0.1:
    resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
@@ -1469,13 +1467,13 @@ packages:
    resolution: {integrity: sha512-/bjOqmgETBYB5BoEeGVea8dmvHb2m9GLy1E9W43yeyfP6QQCZGFNa+XRceJEuDB6zqr+gKpIAmlLebMpykw/MQ==}
    engines: {node: '>=10'}

-  p-queue@8.1.1:
-    resolution: {integrity: sha512-aNZ+VfjobsWryoiPnEApGGmf5WmNsCo9xu8dfaYamG5qaLP7ClhLN6NgsFe6SwJ2UbLEBK5dv9x8Mn5+RVhMWQ==}
+  p-queue@8.1.0:
+    resolution: {integrity: sha512-mxLDbbGIBEXTJL0zEx8JIylaj3xQ7Z/7eEVjcF9fJX4DBiH9oqe+oahYnlKKxm0Ci9TlWTyhSHgygxMxjIB2jw==}
    engines: {node: '>=18'}

-  p-retry@7.0.0:
-    resolution: {integrity: sha512-3BgO9rjULJYyr0Y0pcsG7FZ+7JB/hfOODO8kx9ppumiO5jprUF92WK/Y7Q0xppZtq4VhTcPiVq7qWLQfIV5aKQ==}
-    engines: {node: '>=20'}
+  p-retry@6.2.1:
+    resolution: {integrity: sha512-hEt02O4hUct5wtwg4H4KcWgDdm+l1bOaEy/hWzd8xtXB9BqxTWBBhb+2ImAtH4Cv4rPjV76xN3Zumqk3k3AhhQ==}
+    engines: {node: '>=16.17'}

  p-timeout@6.1.4:
    resolution: {integrity: sha512-MyIV3ZA/PmyBN/ud8vV9XzwTrNtR4jFrObymZYnZqMmW0zA8Z17vnT0rBgFE/TlohB+YCHqXMgZzb3Csp49vqg==}
@@ -1654,6 +1652,10 @@ packages:
    resolution: {integrity: sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==}
    engines: {node: '>= 4'}

+  retry@0.13.1:
+    resolution: {integrity: sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==}
+    engines: {node: '>= 4'}
+
  reusify@1.1.0:
    resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
    engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
@@ -1918,8 +1920,8 @@ packages:
      eslint: ^8.57.0 || ^9.0.0
      typescript: '>=4.8.4 <5.9.0'

-  typescript@5.9.2:
-    resolution: {integrity: sha512-CWBzXQrc/qOkhidw1OzBTQuYRbfyxDXJMVJ1XNwUHGROVmuaeiEm3OslpZ1RV96d7SKKjZKrSJu3+t/xlw3R9A==}
+  typescript@5.8.3:
+    resolution: {integrity: sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==}
    engines: {node: '>=14.17'}
    hasBin: true

@@ -2009,8 +2011,8 @@ packages:
  yallist@4.0.0:
    resolution: {integrity: sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==}

-  yaml@2.8.1:
-    resolution: {integrity: sha512-lcYcMxX2PO9XMGvAJkJ3OsNMw+/7FKes7/hgerGUYWIoWu5j/+YQqcZr5JnPZWzOsEBgMbSbiSTn/dv/69Mkpw==}
+  yaml@2.8.0:
+    resolution: {integrity: sha512-4lLa/EcQCB0cJkyts+FpIRx5G/llPxfP6VQU5KByHEhLxY3IJCH0f0Hy1MHI8sClTvsIb8qwRJ6R/ZdlDJ/leQ==}
    engines: {node: '>= 14.6'}
    hasBin: true

@@ -2022,8 +2024,8 @@ packages:
    resolution: {integrity: sha512-GQHQqAopRhwU8Kt1DDM8NjibDXHC8eoh1erhGAJPEyveY9qqVeXvVikNKrDz69sHowPMorbPUrH/mx8c50eiBQ==}
    engines: {node: '>=18'}

-  zod@4.1.11:
-    resolution: {integrity: sha512-WPsqwxITS2tzx1bzhIKsEs19ABD5vmCVa4xBo2tq/SrV4RNZtfws1EnCWQXM6yh8bD08a1idvkB5MZSBiZsjwg==}
+  zod@4.0.14:
+    resolution: {integrity: sha512-nGFJTnJN6cM2v9kXL+SOBq3AtjQby3Mv5ySGFof5UGRHrRioSJ5iG680cYNjE/yWk671nROcpPj4hAS8nyLhSw==}

 snapshots:

@@ -2105,7 +2107,7 @@ snapshots:
    dependencies:
      jsep: 1.4.0

-  '@kubernetes/client-node@1.3.0(patch_hash=0b0e5d32aa2930107c8c9b45df2639faf53fa12a389a551885d6e42d71f9429d)(encoding@0.1.13)':
+  '@kubernetes/client-node@1.3.0(encoding@0.1.13)':
    dependencies:
      '@types/js-yaml': 4.0.9
      '@types/node': 22.16.5
@@ -2192,45 +2194,47 @@ snapshots:
    dependencies:
      undici-types: 6.21.0

+  '@types/retry@0.12.2': {}
+
  '@types/stream-buffers@3.0.7':
    dependencies:
      '@types/node': 22.16.5

-  '@typescript-eslint/eslint-plugin@8.38.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2))(eslint@9.32.0)(typescript@5.9.2)':
+  '@typescript-eslint/eslint-plugin@8.38.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3))(eslint@9.32.0)(typescript@5.8.3)':
    dependencies:
      '@eslint-community/regexpp': 4.12.1
-      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
      '@typescript-eslint/scope-manager': 8.38.0
-      '@typescript-eslint/type-utils': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
-      '@typescript-eslint/utils': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+      '@typescript-eslint/type-utils': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
      '@typescript-eslint/visitor-keys': 8.38.0
      eslint: 9.32.0
      graphemer: 1.4.0
      ignore: 7.0.5
      natural-compare: 1.4.0
-      ts-api-utils: 2.1.0(typescript@5.9.2)
-      typescript: 5.9.2
+      ts-api-utils: 2.1.0(typescript@5.8.3)
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

-  '@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2)':
+  '@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3)':
    dependencies:
      '@typescript-eslint/scope-manager': 8.38.0
      '@typescript-eslint/types': 8.38.0
-      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.9.2)
+      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.8.3)
      '@typescript-eslint/visitor-keys': 8.38.0
      debug: 4.4.1
      eslint: 9.32.0
-      typescript: 5.9.2
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

-  '@typescript-eslint/project-service@8.38.0(typescript@5.9.2)':
+  '@typescript-eslint/project-service@8.38.0(typescript@5.8.3)':
    dependencies:
-      '@typescript-eslint/tsconfig-utils': 8.38.0(typescript@5.9.2)
+      '@typescript-eslint/tsconfig-utils': 8.38.0(typescript@5.8.3)
      '@typescript-eslint/types': 8.38.0
      debug: 4.4.1
-      typescript: 5.9.2
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

@@ -2239,28 +2243,28 @@ snapshots:
      '@typescript-eslint/types': 8.38.0
      '@typescript-eslint/visitor-keys': 8.38.0

-  '@typescript-eslint/tsconfig-utils@8.38.0(typescript@5.9.2)':
+  '@typescript-eslint/tsconfig-utils@8.38.0(typescript@5.8.3)':
    dependencies:
-      typescript: 5.9.2
+      typescript: 5.8.3

-  '@typescript-eslint/type-utils@8.38.0(eslint@9.32.0)(typescript@5.9.2)':
+  '@typescript-eslint/type-utils@8.38.0(eslint@9.32.0)(typescript@5.8.3)':
    dependencies:
      '@typescript-eslint/types': 8.38.0
-      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.9.2)
-      '@typescript-eslint/utils': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
      debug: 4.4.1
      eslint: 9.32.0
-      ts-api-utils: 2.1.0(typescript@5.9.2)
-      typescript: 5.9.2
+      ts-api-utils: 2.1.0(typescript@5.8.3)
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

  '@typescript-eslint/types@8.38.0': {}

-  '@typescript-eslint/typescript-estree@8.38.0(typescript@5.9.2)':
+  '@typescript-eslint/typescript-estree@8.38.0(typescript@5.8.3)':
    dependencies:
-      '@typescript-eslint/project-service': 8.38.0(typescript@5.9.2)
-      '@typescript-eslint/tsconfig-utils': 8.38.0(typescript@5.9.2)
+      '@typescript-eslint/project-service': 8.38.0(typescript@5.8.3)
+      '@typescript-eslint/tsconfig-utils': 8.38.0(typescript@5.8.3)
      '@typescript-eslint/types': 8.38.0
      '@typescript-eslint/visitor-keys': 8.38.0
      debug: 4.4.1
@@ -2268,19 +2272,19 @@ snapshots:
      is-glob: 4.0.3
      minimatch: 9.0.5
      semver: 7.7.2
-      ts-api-utils: 2.1.0(typescript@5.9.2)
-      typescript: 5.9.2
+      ts-api-utils: 2.1.0(typescript@5.8.3)
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

-  '@typescript-eslint/utils@8.38.0(eslint@9.32.0)(typescript@5.9.2)':
+  '@typescript-eslint/utils@8.38.0(eslint@9.32.0)(typescript@5.8.3)':
    dependencies:
      '@eslint-community/eslint-utils': 4.7.0(eslint@9.32.0)
      '@typescript-eslint/scope-manager': 8.38.0
      '@typescript-eslint/types': 8.38.0
-      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.9.2)
+      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.8.3)
      eslint: 9.32.0
-      typescript: 5.9.2
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

@@ -2518,7 +2522,7 @@ snapshots:
  clean-stack@2.2.0:
    optional: true

-  cloudflare@5.1.0(encoding@0.1.13):
+  cloudflare@4.5.0(encoding@0.1.13):
    dependencies:
      '@types/node': 18.19.123
      '@types/node-fetch': 2.6.12
@@ -2783,17 +2787,17 @@ snapshots:
    transitivePeerDependencies:
      - supports-color

-  eslint-module-utils@2.12.1(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2))(eslint-import-resolver-node@0.3.9)(eslint@9.32.0):
+  eslint-module-utils@2.12.1(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3))(eslint-import-resolver-node@0.3.9)(eslint@9.32.0):
    dependencies:
      debug: 3.2.7
    optionalDependencies:
-      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
      eslint: 9.32.0
      eslint-import-resolver-node: 0.3.9
    transitivePeerDependencies:
      - supports-color

-  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2))(eslint@9.32.0):
+  eslint-plugin-import@2.32.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3))(eslint@9.32.0):
    dependencies:
      '@rtsao/scc': 1.1.0
      array-includes: 3.1.9
@@ -2804,7 +2808,7 @@ snapshots:
      doctrine: 2.1.0
      eslint: 9.32.0
      eslint-import-resolver-node: 0.3.9
-      eslint-module-utils: 2.12.1(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2))(eslint-import-resolver-node@0.3.9)(eslint@9.32.0)
+      eslint-module-utils: 2.12.1(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3))(eslint-import-resolver-node@0.3.9)(eslint@9.32.0)
      hasown: 2.0.2
      is-core-module: 2.16.1
      is-glob: 4.0.3
@@ -2816,7 +2820,7 @@ snapshots:
      string.prototype.trimend: 1.0.9
      tsconfig-paths: 3.15.0
    optionalDependencies:
-      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
    transitivePeerDependencies:
      - eslint-import-resolver-typescript
      - eslint-import-resolver-webpack
@@ -3642,14 +3646,16 @@ snapshots:
      aggregate-error: 3.1.0
    optional: true

-  p-queue@8.1.1:
+  p-queue@8.1.0:
    dependencies:
      eventemitter3: 5.0.1
      p-timeout: 6.1.4

-  p-retry@7.0.0:
+  p-retry@6.2.1:
    dependencies:
+      '@types/retry': 0.12.2
      is-network-error: 1.1.0
+      retry: 0.13.1

  p-timeout@6.1.4: {}

@@ -3818,6 +3824,8 @@ snapshots:
  retry@0.12.0:
    optional: true

+  retry@0.13.1: {}
+
  reusify@1.1.0: {}

  rfc4648@1.5.4: {}
@@ -4106,9 +4114,9 @@ snapshots:

  tr46@0.0.3: {}

-  ts-api-utils@2.1.0(typescript@5.9.2):
+  ts-api-utils@2.1.0(typescript@5.8.3):
    dependencies:
-      typescript: 5.9.2
+      typescript: 5.8.3

  tsconfig-paths@3.15.0:
    dependencies:
@@ -4158,18 +4166,18 @@ snapshots:
      possible-typed-array-names: 1.1.0
      reflect.getprototypeof: 1.0.10

-  typescript-eslint@8.38.0(eslint@9.32.0)(typescript@5.9.2):
+  typescript-eslint@8.38.0(eslint@9.32.0)(typescript@5.8.3):
    dependencies:
-      '@typescript-eslint/eslint-plugin': 8.38.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.9.2))(eslint@9.32.0)(typescript@5.9.2)
-      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
-      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.9.2)
-      '@typescript-eslint/utils': 8.38.0(eslint@9.32.0)(typescript@5.9.2)
+      '@typescript-eslint/eslint-plugin': 8.38.0(@typescript-eslint/parser@8.38.0(eslint@9.32.0)(typescript@5.8.3))(eslint@9.32.0)(typescript@5.8.3)
+      '@typescript-eslint/parser': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
+      '@typescript-eslint/typescript-estree': 8.38.0(typescript@5.8.3)
+      '@typescript-eslint/utils': 8.38.0(eslint@9.32.0)(typescript@5.8.3)
      eslint: 9.32.0
-      typescript: 5.9.2
+      typescript: 5.8.3
    transitivePeerDependencies:
      - supports-color

-  typescript@5.9.2: {}
+  typescript@5.8.3: {}

  unbox-primitive@1.1.0:
    dependencies:
@@ -4269,10 +4277,10 @@ snapshots:

  yallist@4.0.0: {}

-  yaml@2.8.1: {}
+  yaml@2.8.0: {}

  yocto-queue@0.1.0: {}

  yoctocolors@2.1.1: {}

-  zod@4.1.11: {}
+  zod@4.0.14: {}
--- a/notes.md
+++ b/notes.md
@@ -1 +0,0 @@
-![authentik bg](/static/dist/assets/images/flow_background.jpg)
--- a/renovate.json5
+++ b/renovate.json5
@@ -5,8 +5,6 @@
  ],
  "packageRules": [
    {
-      "groupName": "Docker images",
-      "groupSlug": "dockerimages",
      "matchDatasources": ["docker"],
      "pinDigests": true
    }
@@ -25,4 +23,4 @@
      "datasourceTemplate": "docker"
    }
  ]
-}
+}
--- a/values.yaml
+++ b/values.yaml
@@ -1,4 +0,0 @@
-globals:
-  environment: prod
-  domain: olsen.cloud
-  timezone: Europe/Amsterdam
				`@@ -1 +0,0 @@`
				`![authentik bg](/static/dist/assets/images/flow_background.jpg)`