attempt add adding renovate

2026-02-08 01:36:28 +01:00 · 2025-09-13 07:58:24 +02:00
31 changed files with 72 additions and 64 deletions
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -1,15 +0,0 @@
-name: Renovate
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: '0 */6 * * *'
-jobs:
-  renovate:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-      - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v40.2.2
-        with:
-          token: ${{ secrets.RENOVATE_TOKEN }}
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,3 @@
 /secret.*.yaml
 /data/
-/.envrc
-*.DS_Store
+*.DS_Store
--- a/charts/apps/apprise/values.yaml
+++ b/charts/apps/apprise/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: docker.io/caronc/apprise
-  tag: latest@sha256:127b3834f0679502529397ead8ffeaadf5189019c4c863fa6652e9b942fdccf8
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: apprise
--- a/charts/apps/audiobookshelf/values.yaml
+++ b/charts/apps/audiobookshelf/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/advplyr/audiobookshelf
-  tag: 2.26.1@sha256:5901162ccdf4b44f563ff2012484d5e315d9a1ecd6af86f7fe605ec96bbc5039
+  tag: 2.26.1
  pullPolicy: IfNotPresent
 subdomain: audiobookshelf
--- a/charts/apps/baikal/values.yaml
+++ b/charts/apps/baikal/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: docker.io/ckulka/baikal
-  tag: nginx@sha256:27bd9afbb8142c2143b6959c023074b05c86356ded0f589fcb1424ab5fbe0a70
+  tag: nginx
  pullPolicy: IfNotPresent
 subdomain: baikal
--- a/charts/apps/calibre-web/values.yaml
+++ b/charts/apps/calibre-web/values.yaml
@@ -4,6 +4,6 @@ globals:
  timezone: Europe/Amsterdam
 image:
  repository: lscr.io/linuxserver/calibre-web
-  tag: latest@sha256:a833d4cf90333f167871fe6ab1f034c7be7bc3d2061a1563fdb6a8fa27af346e
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: calibre-web
--- a/charts/apps/coder/values.yaml
+++ b/charts/apps/coder/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/coder/coder
-  tag: latest@sha256:73714e0685addde01bbff905cf5b647d6b677d77977c8009b6293d40fdf0f562
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: coder
--- a/charts/apps/esphome/values.yaml
+++ b/charts/apps/esphome/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: ghcr.io/esphome/esphome
-  tag: latest@sha256:393775c4c02e0b09d086cd794815a723f90d4af7c3d871935e22be1a34c5d89a
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: esphome
--- a/charts/apps/gitea/values.yaml
+++ b/charts/apps/gitea/values.yaml
@@ -3,6 +3,6 @@ globals:
  timezone: Europe/Amsterdam
 image:
  repository: docker.gitea.com/gitea
-  tag: latest@sha256:2edc102cbb636ae1ddac5fa0c715aa5b03079dee13ac6800b2cef6d4e912e718
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: gitea
--- a/charts/apps/headscale/values.yaml
+++ b/charts/apps/headscale/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: headscale/headscale
-  tag: latest@sha256:ea9b5ee06274d757a4d52103de56cd11a9c393acb19d9a35f4b9fe52ada410de
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: headscale
--- a/charts/apps/homarr/values.yaml
+++ b/charts/apps/homarr/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/homarr-labs/homarr
-  tag: latest@sha256:7d58149aa544037d173a48f41fbde86706068d2b8933a33a911dce26457ecf16
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: homarr
--- a/charts/apps/home-assistant/values.yaml
+++ b/charts/apps/home-assistant/values.yaml
@@ -3,19 +3,19 @@ globals:
  timezone: Europe/Amsterdam
 image:
  repository: ghcr.io/home-assistant/home-assistant
-  tag: stable@sha256:37af5e84627dc6cc4f8ce2de631cca7ee1fc76c908b429b3a8c1ec46f246a5fe
+  tag: stable
  pullPolicy: IfNotPresent
 subdomain: home-assistant
 piper:
  image:
    repository: ghcr.io/morten-olsen/glados-voice
-    tag: main@sha256:8fcc19bd9e7e846bdfd9e9e569c8c944dcfb1d0b47e3f479cbaa7f5587c7206c
+    tag: main
    pullPolicy: Always
  model: en_US-glados-medium
 whisper:
  image:
    repository: rhasspy/wyoming-whisper
-    tag: latest@sha256:f03456914affe8076fc7688c0890f4c708d93ebfac7340b0b2467f721412012d
+    tag: latest
    pullPolicy: IfNotPresent
  model: tiny-int8
  language: us
--- a/charts/apps/jellyfin/values.yaml
+++ b/charts/apps/jellyfin/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: docker.io/jellyfin/jellyfin
-  tag: latest@sha256:7ae36aab93ef9b6aaff02b37f8bb23df84bb2d7a3f6054ec8fc466072a648ce2
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: jellyfin
--- a/charts/apps/mealie/values.yaml
+++ b/charts/apps/mealie/values.yaml
@@ -5,4 +5,4 @@ globals:
 subdomain: mealie
 image:
  repository: ghcr.io/mealie-recipes/mealie
-  tag: latest@sha256:d872fb529097df2d77b3c6f5e469b047f99d0d1c9f793a84ae27aa106e1f5d7e
+  tag: latest
--- a/charts/apps/metamcp/values.yaml
+++ b/charts/apps/metamcp/values.yaml
@@ -3,6 +3,6 @@ globals:
  timezone: Europe/Amsterdam
 image:
  repository: ghcr.io/metatool-ai/metamcp
-  tag: latest@sha256:09e467e3ac40132f4ee11407e792ca5767894b0909d56c270223bdfe64dfcfd2
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: metamcp
--- a/charts/apps/miniflux/values.yaml
+++ b/charts/apps/miniflux/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: ghcr.io/miniflux/miniflux
-  tag: latest@sha256:b435a1ea2408f996c8d4c00c4f46523fa9203971ee1e85b1fe7ad3f0e7ae617f
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: miniflux
--- a/charts/apps/mqtt/values.yaml
+++ b/charts/apps/mqtt/values.yaml
@@ -4,7 +4,7 @@ globals:
  domain: olsen.cloud
 image:
  repository: docker.io/eclipse-mosquitto
-  tag: latest@sha256:d219d3a72847f3aed6a1d66975972d3b17f86e39e8f6f6b86b4088b879c1a2d6
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: mqtt
 mode: json-rpc
--- a/charts/apps/music-assistant/values.yaml
+++ b/charts/apps/music-assistant/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/music-assistant/server
-  tag: latest@sha256:f534116c53d49b3120961c908a5fa24f28684806bf222ccd74add9e16b105aa4
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: music-assistant
--- a/charts/apps/n8n/values.yaml
+++ b/charts/apps/n8n/values.yaml
@@ -4,6 +4,6 @@ globals:
  domain: olsen.cloud
 image:
  repository: docker.n8n.io/n8nio/n8n
-  tag: latest@sha256:6c0c7650150a3fb0fd30d13160a87b5227963c36c9297b5bda618bcadfcee932
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: n8n
--- a/charts/apps/ollama/values.yaml
+++ b/charts/apps/ollama/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ollama/ollama
-  tag: 0.11.8@sha256:03eaa1581455ba16e7c954d799e4f44996b60ae668261acd00a0e80a241ed720
+  tag: 0.11.8
  pullPolicy: IfNotPresent
 subdomain: openwebui
--- a/charts/apps/openwebui/values.yaml
+++ b/charts/apps/openwebui/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: ghcr.io/open-webui/open-webui
-  tag: main@sha256:2e78a2f9f6f62173ae28d2203f3c9bcdadc614023380ebbe903ea9fab772535e
+  tag: main
  pullPolicy: IfNotPresent
 subdomain: openwebui
--- a/charts/apps/photoprism/values.yaml
+++ b/charts/apps/photoprism/values.yaml
@@ -2,6 +2,6 @@ globals:
  environment: prod
 image:
  repository: photoprism/photoprism
-  tag: latest@sha256:2ba3a774ca1acc498096d7a5cb50df9cfecb7e3117a617d648093ff74eec2793
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: photoprism
--- a/charts/apps/readeck/values.yaml
+++ b/charts/apps/readeck/values.yaml
@@ -4,6 +4,6 @@ globals:
  timezone: Europe/Amsterdam
 image:
  repository: codeberg.org/readeck/readeck
-  tag: latest@sha256:2fc8c3ce875db68fbfdc6cdd517a9315b14be65867116ffac26997e800def0ca
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: readeck
--- a/charts/apps/signal/values.yaml
+++ b/charts/apps/signal/values.yaml
@@ -4,7 +4,7 @@ globals:
  domain: olsen.cloud
 image:
  repository: bbernhard/signal-cli-rest-api
-  tag: latest@sha256:e4bc92213b2a4da10fc429d16ed1754e90c2c169f186efbb9ce5f04da5322771
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: apprise
 mode: json-rpc
--- a/charts/apps/zot/values.yaml
+++ b/charts/apps/zot/values.yaml
@@ -5,4 +5,4 @@ globals:
 subdomain: zot
 image:
  repository: ghcr.io/project-zot/zot
-  tag: latest@sha256:cd2aea942f428630bcb4190542be6abd35e14177aab84fc7ccad0dca8ecb363d
+  tag: latest
--- a/charts/backup/values.yaml
+++ b/charts/backup/values.yaml
@@ -4,7 +4,7 @@ globals:
  domain: olsen.cloud
 image:
  repository: garethgeorge/backrest
-  tag: latest@sha256:f8306faef0a3cbedc7daa55756f1d4c105d8c104aa773656bdad4fa8553dab5a
+  tag: latest
  pullPolicy: IfNotPresent
 subdomain: restic
 password:
--- a/charts/operator/values.yaml
+++ b/charts/operator/values.yaml
@@ -6,7 +6,7 @@ image:
  repository: ghcr.io/morten-olsen/homelab-operator
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  tag: main@sha256:752b25d3ef9711e72d63e936244dac03c6caa2dd1e00f49fb98238f2702f07a5
+  tag: main

 imagePullSecrets: []
 nameOverride: ''
--- a/images/backup/Dockerfile
+++ b/images/backup/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine/git:latest@sha256:9c9c6debba3eac25c9230db4bbd1e17d0c27efffdb93e502a47f6f447ab90ac4
+FROM alpine/git:latest
 # or a more specific image like a Debian slim or Ubuntu base image.
 RUN apk add --no-cache restic fuse-overlayfs
 WORKDIR /app
--- a/images/operator/Dockerfile
+++ b/images/operator/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:23-slim@sha256:86191b94d2a163be41f3dc7fe5e5fcaca8ba2f1be7275d98a06343483c17414a
+FROM node:23-slim
 RUN corepack enable
 COPY package.json pnpm-lock.yaml ./
 RUN pnpm install --frozen-lockfile --prod
--- a/images/operator/pnpm-lock.yaml
+++ b/images/operator/pnpm-lock.yaml
@@ -28,7 +28,7 @@ importers:
        version: 2.2.3
      dotenv:
        specifier: ^17.2.1
-        version: 17.2.2
+        version: 17.2.1
      eventemitter3:
        specifier: ^5.0.1
        version: 5.0.1
@@ -614,8 +614,8 @@ packages:
    resolution: {integrity: sha512-35mSku4ZXK0vfCuHEDAwt55dg2jNajHZ1odvF+8SSr82EsZY4QmXfuWso8oEd8zRhVObSN18aM0CjSdoBX7zIw==}
    engines: {node: '>=0.10.0'}

-  dotenv@17.2.2:
-    resolution: {integrity: sha512-Sf2LSQP+bOlhKWWyhFsn0UsfdK/kCWRv1iuA2gXAwt3dyNabr6QSj00I2V10pidqz69soatm9ZwZvpQMTIOd5Q==}
+  dotenv@17.2.1:
+    resolution: {integrity: sha512-kQhDYKZecqnM0fCnzI5eIv5L4cAe/iRI+HqMbO/hbRdTAeXDG+M9FjipUxNfbARuEg4iHIbhnhs78BCHNbSxEQ==}
    engines: {node: '>=12'}

  dunder-proto@1.0.1:
@@ -2651,7 +2651,7 @@ snapshots:
    dependencies:
      esutils: 2.0.3

-  dotenv@17.2.2: {}
+  dotenv@17.2.1: {}

  dunder-proto@1.0.1:
    dependencies:
--- a/renovate.json5
+++ b/renovate.json5
@@ -1,26 +1,50 @@
+// .github/renovate.json5 (or renovate.json)
 {
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:base"
-  ],
+  "autodiscover": false,
  "packageRules": [
    {
      "matchDatasources": ["docker"],
-      "pinDigests": true
-    }
+      "extractVersion": "^(?<version>.*)$",
+      "versioning": "semver",
+      "groupName": "All Docker Images"
+      "pinDigests": true,
+    },
  ],
-  "helm-values": {
-    "fileMatch": ["^charts/.*/values\\.yaml$"]
+  "helm": {
+    "fileMatch": ["charts/**/values.yaml"],
+    // You generally don't need to list public registries here.
+    // Only add specific entries for *private* registries that require explicit authentication.
+    // Renovate is smart enough to infer common public ones.
+    "registryUrls": {
+      // "my.private.registry.com": "https://my.private.registry.com/v2/" // Example for a private registry
+    }
  },
  "regexManagers": [
    {
-      "fileMatch": ["^charts/.*/values\\.yaml$"],
+      "fileMatch": ["(^|/)charts/.*values\\.yaml$"],
      "matchStrings": [
-        "repository:\s*'(?<depName>.*?)'\n\s*tag:\s*'(?<currentValue>.*?)'",
-        "repository:\s*\"(?<depName>.*?)\"\n\s*tag:\s*\"(?<currentValue>.*?)\"",
-        "repository:\s*(?<depName>.*?)\n\s*tag:\s*(?<currentValue>.*)"
+        // Primary image:
+        // This regex tries to capture the full image name, including the registry if specified.
+        // It's designed to be flexible.
+        "repository:\\s*(?<depName>.*?)\\n\\s*tag:\\s*(?<currentValue>.*?)\\n",
+
+        // Nested images (e.g., piper.image, whisper.image):
+        // This regex accounts for a preceding key and potential 'image:' sub-key.
+        "^(?!\\s*#)[^\\s]*?:(?:\\n\\s*image:)?\\n\\s*repository:\\s*(?<depName>.*?)\\n\\s*tag:\\s*(?<currentValue>.*?)\\n"
      ],
-      "datasourceTemplate": "docker"
+      "datasourceTemplate": "docker",
+      // Important: Add a "depNameTemplate" to ensure capture group 1 (depName) is used
+      // which should contain the full path including registry
+      "depNameTemplate": "{{depName}}"
    }
-  ]
-}
+  ],
+  // ... rest of your configuration
+  "ignorePaths": ["**/node_modules/**", "**/vendor/**"],
+  "timezone": "Europe/Oslo",
+  "schedule": ["at any time"],
+  "commitMessageTopic": "{{depName}} Docker image",
+  "prConcurrentLimit": 5,
+  "dependencyDashboard": true,
+  "dependencyDashboardAutoclose": true
+}