chore(deps): update docker images

charts/operator/values.yaml

@@ -6,7 +6,7 @@ image:
   repository: ghcr.io/morten-olsen/homelab-operator
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  tag: main@sha256:df20d7e4f48bd886cef63ab882de9c6df76b0b297724d1cdf3a79aba8de6f896
+  tag: main@sha256:6ccd49971ca0c230f42c9c7b52197c853c87b77a89f66dc7791335191fb79054
 
 imagePullSecrets: []
 nameOverride: ""

images/backup/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine/git:latest@sha256:bd54f921f6d803dfa3a4fe14b7defe36df1b71349a3e416547e333aa960f86e3
+FROM alpine/git:latest@sha256:63d6641dc22922b38b8c19780d2308879ef29a8fb9766ddb90f7e4c9ddeefad3
 # or a more specific image like a Debian slim or Ubuntu base image.
 RUN apk add --no-cache restic fuse-overlayfs
 WORKDIR /app

images/operator/src/bootstrap/bootstrap.ts

@@ -31,11 +31,11 @@ class BootstrapService {
 
   public ensure = async () => {
     await this.namespaces.ensure();
-    await this.repos.ensure();
+    // await this.repos.ensure();
-    await this.releases.ensure();
+    // await this.releases.ensure();
-    await this.cloudflareTunnel.ensure({
+    // await this.cloudflareTunnel.ensure({
-      spec: {},
+    //  spec: {},
-    });
+    //});
   };
 }
 

images/operator/src/index.ts

@@ -8,7 +8,7 @@ import { homelab } from '#resources/homelab/homelab.ts';
 const services = new Services();
 const resourceService = services.get(ResourceService);
 
-await resourceService.install(...Object.values(homelab));
+// await resourceService.install(...Object.values(homelab));
 await resourceService.register(...Object.values(resources));
 
 const bootstrapService = services.get(BootstrapService);

images/operator/src/resources/homelab/authentik-server/authentik-server.ts

@@ -168,7 +168,7 @@ class AuthentikServer extends CustomResource<typeof specSchema> {
         chart: {
           spec: {
             chart: 'authentik',
-            version: '2025.6.4',
+            version: '2025.10.3',
             sourceRef: {
               apiVersion: 'source.toolkit.fluxcd.io/v1',
               kind: 'HelmRepository',

images/operator/src/resources/homelab/oidc-client/oidc-client.ts

@@ -79,7 +79,7 @@ class OIDCClient extends CustomResource<typeof specSchema> {
       clientId: this.name,
       configuration: new URL(`/application/o/${this.appName}/.well-known/openid-configuration`, url).toString(),
       configurationIssuer: new URL(`/application/o/${this.appName}/`, url).toString(),
-      authorization: new URL(`/application/o/${this.appName}/authorize/`, url).toString(),
+      authorization: new URL(`/application/o/authorize/`, url).toString(),
       token: new URL(`/application/o/${this.appName}/token/`, url).toString(),
       userinfo: new URL(`/application/o/${this.appName}/userinfo/`, url).toString(),
       endSession: new URL(`/application/o/${this.appName}/end-session/`, url).toString(),

images/operator/src/resources/homelab/postgres-cluster/postgres-cluster.ts

@@ -108,7 +108,7 @@ class PostgresCluster extends CustomResource<typeof specSchema> {
             containers: [
               {
                 name: this.name,
-                image: 'postgres:17',
+                image: 'pgvector/pgvector:pg17-trixie',
                 ports: [{ containerPort: 5432, name: 'postgres' }],
                 env: [
                   { name: 'POSTGRES_PASSWORD', valueFrom: { secretKeyRef: { name: secretName, key: 'password' } } },

images/operator/src/resources/resources.ts

@@ -11,7 +11,7 @@ const resources = {
   ...flux,
   ...certManager,
   ...istio,
-  ...homelab,
+  // ...homelab,
 } satisfies Record<string, ResourceClass<ExpectedAny>>;
 
 export { resources };