From 1ece4a0657e1906d5ebfbaadad7642510ac89381 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 25 May 2026 03:11:10 +0000 Subject: [PATCH 01/44] chore(deps): update helm release renovate to 46.169.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 0c27199..a195f5d 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.168.* + targetRevision: 46.169.* helm: valuesObject: renovate: From b3d11532d2e9482aea0ea528201c1d10a31f1585 Mon Sep 17 00:00:00 2001 From: Hane Date: Tue, 26 May 2026 17:55:45 +0200 Subject: [PATCH 02/44] fix: add ignore rule for emacs buffer temp files --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index 0166b40..9decfb5 100644 --- a/.gitignore +++ b/.gitignore @@ -14,3 +14,4 @@ terraform.rc .idea/ secrets.yaml .env +*~ From 50047571c310d0e13775ef0aa99c216993426c66 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 27 May 2026 02:58:58 +0000 Subject: [PATCH 03/44] chore(deps): update helm release kured to 5.12.* --- k8s/argo-apps/kured.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/kured.yaml b/k8s/argo-apps/kured.yaml index d15330a..ff3d18e 100644 --- a/k8s/argo-apps/kured.yaml +++ b/k8s/argo-apps/kured.yaml @@ -13,7 +13,7 @@ spec: source: chart: kured repoURL: https://kubereboot.github.io/charts - targetRevision: 5.11.* + targetRevision: 5.12.* helm: valuesObject: configuration.rebootDays: From 9c0307ad0cacc7719ad4fb4ce1c2d554bf0d4d40 Mon Sep 17 00:00:00 2001 From: Hane Date: Tue, 26 May 2026 17:45:51 +0200 Subject: [PATCH 04/44] feat: added pluton compose file --- docker/pluton/docker-compose.yaml | 50 +++++++++++++++++++++++++++++++ docker/pluton/sample.env | 6 ++++ 2 files changed, 56 insertions(+) create mode 100644 docker/pluton/docker-compose.yaml create mode 100644 docker/pluton/sample.env diff --git a/docker/pluton/docker-compose.yaml b/docker/pluton/docker-compose.yaml new file mode 100644 index 0000000..b4ff97d --- /dev/null +++ b/docker/pluton/docker-compose.yaml @@ -0,0 +1,50 @@ +--- +services: + pluton: + image: plutonhq/pluton:latest + container_name: pluton-backup + #restart: unless-stopped + + ports: + - "${SERVER_PORT:-5173}:${SERVER_PORT:-5173}" + + volumes: + # Main data volume - contains database, config, logs + - pluton-data:/data + + # Optional: Mount host directories to backup + + # Example: Make user's documents folders Accessible to Pluton + - /home//pihanepi/config/nginx:/mnt/nginxconf:ro #linux + - /home//pihanepi/data/pluton/backupdir:/mnt/backupdir + + environment: + # ===== REQUIRED: Security & Authentication ===== + # Generate secure random strings (min 12 characters each) + ENCRYPTION_KEY: ${ENCRYPTION_KEY} # Encryption key for restic/rclone Snapshot encryption + USER_NAME: ${USER_NAME} # Admin username for login + USER_PASSWORD: ${USER_PASSWORD} # Admin password for login + + # ===== Application Settings ===== + APP_TITLE: ${APP_TITLE:-Pluton} + #APP_URL: ${APP_URL:-http://localhost:5173} + SERVER_PORT: ${SERVER_PORT:-5173} + MAX_CONCURRENT_BACKUPS: ${MAX_CONCURRENT_BACKUPS:-2} + SESSION_DURATION: ${SESSION_DURATION:-7} # How long frontend login Session lasts in Days + + # ===== User Interface Security Settings ===== + ALLOW_CUSTOM_RESTORE_PATH: ${ALLOW_CUSTOM_RESTORE_PATH:-true} + ALLOW_FILE_BROWSER: ${ALLOW_FILE_BROWSER:-true} + DISABLE_EVENT_SCRIPTS: ${DISABLE_EVENT_SCRIPTS:-false} + + # ===== Docker-specific (do not change) ===== + NODE_ENV: production + IS_DOCKER: "true" + +volumes: + pluton-data: + name: "pluton-volume" + driver_opts: + type: "volume" + external: "false" + \ No newline at end of file diff --git a/docker/pluton/sample.env b/docker/pluton/sample.env new file mode 100644 index 0000000..9b24d38 --- /dev/null +++ b/docker/pluton/sample.env @@ -0,0 +1,6 @@ +ENCRYPTION_KEY='' +USER_NAME='' +USER_PASSWORD='' + +# Optional - override defaults +SERVER_PORT='8050' \ No newline at end of file From d2d163db9dffc445d307bf7f0e8a9c212986304f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Wed, 27 May 2026 01:08:22 +0200 Subject: [PATCH 05/44] feat: add pluton volumes --- README.md | 3 -- docker/pluton/docker-compose.yaml | 50 ------------------------------- docker/pluton/docker-compose.yml | 25 ++++++++++++++++ 3 files changed, 25 insertions(+), 53 deletions(-) delete mode 100644 docker/pluton/docker-compose.yaml create mode 100644 docker/pluton/docker-compose.yml diff --git a/README.md b/README.md index 4706caa..1b287dc 100644 --- a/README.md +++ b/README.md @@ -1,4 +1 @@ # fukuops - -[![Last build status](https://git.roboces.dev/catalin/fukuops/badges/workflows/ci.yaml/badge.svg)](https://git.roboces.dev/catalin/fukuops/actions) -[![Tofu deployments](https://git.roboces.dev/catalin/fukuops/badges/workflows/deploy-tofu.yaml/badge.svg)](https://git.roboces.dev/catalin/fukuops/actions) diff --git a/docker/pluton/docker-compose.yaml b/docker/pluton/docker-compose.yaml deleted file mode 100644 index b4ff97d..0000000 --- a/docker/pluton/docker-compose.yaml +++ /dev/null @@ -1,50 +0,0 @@ ---- -services: - pluton: - image: plutonhq/pluton:latest - container_name: pluton-backup - #restart: unless-stopped - - ports: - - "${SERVER_PORT:-5173}:${SERVER_PORT:-5173}" - - volumes: - # Main data volume - contains database, config, logs - - pluton-data:/data - - # Optional: Mount host directories to backup - - # Example: Make user's documents folders Accessible to Pluton - - /home//pihanepi/config/nginx:/mnt/nginxconf:ro #linux - - /home//pihanepi/data/pluton/backupdir:/mnt/backupdir - - environment: - # ===== REQUIRED: Security & Authentication ===== - # Generate secure random strings (min 12 characters each) - ENCRYPTION_KEY: ${ENCRYPTION_KEY} # Encryption key for restic/rclone Snapshot encryption - USER_NAME: ${USER_NAME} # Admin username for login - USER_PASSWORD: ${USER_PASSWORD} # Admin password for login - - # ===== Application Settings ===== - APP_TITLE: ${APP_TITLE:-Pluton} - #APP_URL: ${APP_URL:-http://localhost:5173} - SERVER_PORT: ${SERVER_PORT:-5173} - MAX_CONCURRENT_BACKUPS: ${MAX_CONCURRENT_BACKUPS:-2} - SESSION_DURATION: ${SESSION_DURATION:-7} # How long frontend login Session lasts in Days - - # ===== User Interface Security Settings ===== - ALLOW_CUSTOM_RESTORE_PATH: ${ALLOW_CUSTOM_RESTORE_PATH:-true} - ALLOW_FILE_BROWSER: ${ALLOW_FILE_BROWSER:-true} - DISABLE_EVENT_SCRIPTS: ${DISABLE_EVENT_SCRIPTS:-false} - - # ===== Docker-specific (do not change) ===== - NODE_ENV: production - IS_DOCKER: "true" - -volumes: - pluton-data: - name: "pluton-volume" - driver_opts: - type: "volume" - external: "false" - \ No newline at end of file diff --git a/docker/pluton/docker-compose.yml b/docker/pluton/docker-compose.yml new file mode 100644 index 0000000..fc75f4e --- /dev/null +++ b/docker/pluton/docker-compose.yml @@ -0,0 +1,25 @@ +--- +services: + pluton: + image: plutonhq/pluton:latest + container_name: pluton-backup + restart: always + ports: + - "${SERVER_PORT:-5173}:${SERVER_PORT:-5173}" + volumes: + - ${PLUTON_DATA:-/mnt/nas1/shared/pluton/data}:/data + - ${PLUTON_BACKUP_VOLUME_SHARED:-/mnt/nas1/shared}:/backups/shared + environment: + ENCRYPTION_KEY: ${ENCRYPTION_KEY} + USER_NAME: ${USER_NAME} + USER_PASSWORD: ${USER_PASSWORD} + APP_TITLE: ${APP_TITLE:-Pluton} + APP_URL: ${APP_URL:-https://backups.fukurokuju.dev} + SERVER_PORT: ${SERVER_PORT:-5173} + MAX_CONCURRENT_BACKUPS: ${MAX_CONCURRENT_BACKUPS:-2} + SESSION_DURATION: ${SESSION_DURATION:-7} + ALLOW_CUSTOM_RESTORE_PATH: ${ALLOW_CUSTOM_RESTORE_PATH:-true} + ALLOW_FILE_BROWSER: ${ALLOW_FILE_BROWSER:-true} + DISABLE_EVENT_SCRIPTS: ${DISABLE_EVENT_SCRIPTS:-false} + NODE_ENV: production + IS_DOCKER: "true" From fff4e51f579836758249707d687c629aa3890884 Mon Sep 17 00:00:00 2001 From: Hane Date: Wed, 27 May 2026 16:20:00 +0200 Subject: [PATCH 06/44] fix: set correct remote container tag --- docker/pluton/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/pluton/docker-compose.yml b/docker/pluton/docker-compose.yml index fc75f4e..8629d89 100644 --- a/docker/pluton/docker-compose.yml +++ b/docker/pluton/docker-compose.yml @@ -1,7 +1,7 @@ --- services: pluton: - image: plutonhq/pluton:latest + image: plutonhq/pluton:0.16.2 container_name: pluton-backup restart: always ports: From 93ba91e10a4b322d347f88b9d03688c90176a059 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 28 May 2026 02:35:15 +0000 Subject: [PATCH 07/44] chore(deps): update helm release renovate to 46.170.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index a195f5d..c187f62 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.169.* + targetRevision: 46.170.* helm: valuesObject: renovate: From 81a7b21f072346968db796310278670a0cf90472 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 29 May 2026 02:39:49 +0000 Subject: [PATCH 08/44] chore(deps): update tailscale/tailscale docker tag to v1.98.4 --- docker/tailscale/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/tailscale/docker-compose.yml b/docker/tailscale/docker-compose.yml index e2cfa35..39bacf7 100644 --- a/docker/tailscale/docker-compose.yml +++ b/docker/tailscale/docker-compose.yml @@ -1,7 +1,7 @@ --- services: tailscale: - image: tailscale/tailscale:v1.98.3 + image: tailscale/tailscale:v1.98.4 hostname: tailscale environment: TS_AUTHKEY: ${TS_AUTHKEY} From 98de5eb39b7cfdbec6a5a5490f7f2ab2fd78727f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 29 May 2026 02:39:30 +0000 Subject: [PATCH 09/44] chore(deps): update ghcr.io/woodpecker-ci/helm/woodpecker docker tag to v3.6.4 --- k8s/argo-apps/woodpecker.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/woodpecker.yaml b/k8s/argo-apps/woodpecker.yaml index 13c97ee..87bee3e 100644 --- a/k8s/argo-apps/woodpecker.yaml +++ b/k8s/argo-apps/woodpecker.yaml @@ -14,7 +14,7 @@ spec: sources: - chart: woodpecker repoURL: ghcr.io/woodpecker-ci/helm - targetRevision: 3.6.3 + targetRevision: 3.6.4 helm: valuesObject: agent: From b00d6c3aa4d566868022619c662b25e9a1c027fe Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 31 May 2026 07:50:02 +0000 Subject: [PATCH 10/44] chore(deps): update helm release renovate to 46.175.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index c187f62..3fbf257 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.170.* + targetRevision: 46.175.* helm: valuesObject: renovate: From 53398955e9099c5395e04727037493e4a06c3f57 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 30 May 2026 04:19:34 +0000 Subject: [PATCH 11/44] chore(deps): update plutonhq/pluton docker tag to v0.16.5 --- docker/pluton/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/pluton/docker-compose.yml b/docker/pluton/docker-compose.yml index 8629d89..0fe160e 100644 --- a/docker/pluton/docker-compose.yml +++ b/docker/pluton/docker-compose.yml @@ -1,7 +1,7 @@ --- services: pluton: - image: plutonhq/pluton:0.16.2 + image: plutonhq/pluton:0.16.5 container_name: pluton-backup restart: always ports: From 0cf2304ce2ceb326761e8269ed476904b44fc6d3 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 3 Jun 2026 03:24:42 +0000 Subject: [PATCH 12/44] chore(deps): update helm release renovate to 46.178.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 3fbf257..f137b51 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.175.* + targetRevision: 46.178.* helm: valuesObject: renovate: From 2c89a9364916cdffcf3266971203071805793bc7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 5 Jun 2026 03:22:57 +0000 Subject: [PATCH 13/44] chore(deps): update plutonhq/pluton docker tag to v0.16.6 --- docker/pluton/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/pluton/docker-compose.yml b/docker/pluton/docker-compose.yml index 0fe160e..a319abe 100644 --- a/docker/pluton/docker-compose.yml +++ b/docker/pluton/docker-compose.yml @@ -1,7 +1,7 @@ --- services: pluton: - image: plutonhq/pluton:0.16.5 + image: plutonhq/pluton:0.16.6 container_name: pluton-backup restart: always ports: From 070099017161d3791f52c9787144451ad2749995 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 4 Jun 2026 03:32:12 +0000 Subject: [PATCH 14/44] chore(deps): update helm release portainer to 239.3.* --- k8s/argo-apps/portainer.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/portainer.yaml b/k8s/argo-apps/portainer.yaml index 10492c2..aec9c82 100644 --- a/k8s/argo-apps/portainer.yaml +++ b/k8s/argo-apps/portainer.yaml @@ -15,7 +15,7 @@ spec: sources: - repoURL: https://portainer.github.io/k8s/ chart: portainer - targetRevision: 239.2.* + targetRevision: 239.3.* helm: valuesObject: service: From 9daca0f623903a88296aac3a6666f387ba1a78fb Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 5 Jun 2026 03:23:34 +0000 Subject: [PATCH 15/44] chore(deps): update helm release renovate to 46.181.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index f137b51..e4fe9be 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.178.* + targetRevision: 46.181.* helm: valuesObject: renovate: From 8bdef1f700ce2d3f493007eee0c8d4da4528bcd6 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 8 Jun 2026 04:15:34 +0000 Subject: [PATCH 16/44] chore(deps): update ghcr.io/lennart-k/rustical docker tag to v0.13.1 --- docker/rustical/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/rustical/docker-compose.yml b/docker/rustical/docker-compose.yml index 3bb8517..56875ac 100644 --- a/docker/rustical/docker-compose.yml +++ b/docker/rustical/docker-compose.yml @@ -1,7 +1,7 @@ --- services: rustical: - image: ghcr.io/lennart-k/rustical:0.12.17 + image: ghcr.io/lennart-k/rustical:0.13.1 restart: unless-stopped ports: - '4000:4000' From 9ad39252b1b03db2f60026fb7c6a516e60e3cfde Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Tue, 9 Jun 2026 10:26:12 +0200 Subject: [PATCH 17/44] feat: update oxicloud appVersion 0.6.0 --- k8s/argo-apps/oxicloud.yaml | 4 ---- k8s/charts/miniflux/values.yaml | 2 +- k8s/charts/oxicloud/Chart.yaml | 2 +- k8s/charts/oxicloud/templates/statefulset.yaml | 2 +- k8s/charts/oxicloud/values.yaml | 15 +++++---------- 5 files changed, 8 insertions(+), 17 deletions(-) diff --git a/k8s/argo-apps/oxicloud.yaml b/k8s/argo-apps/oxicloud.yaml index 2e2ba46..6a6b29f 100644 --- a/k8s/argo-apps/oxicloud.yaml +++ b/k8s/argo-apps/oxicloud.yaml @@ -15,10 +15,6 @@ spec: targetRevision: main helm: valuesObject: - image: - repository: diocrafts/oxicloud - pullPolicy: Always - tag: "0.5.6" persistence: enabled: true storageClass: "truenas-nfs-csi" diff --git a/k8s/charts/miniflux/values.yaml b/k8s/charts/miniflux/values.yaml index 5b4b49f..256da47 100644 --- a/k8s/charts/miniflux/values.yaml +++ b/k8s/charts/miniflux/values.yaml @@ -3,7 +3,7 @@ replicaCount: 1 image: repository: miniflux/miniflux - pullPolicy: Always + pullpolicy: always tag: "" imagePullSecrets: [] diff --git a/k8s/charts/oxicloud/Chart.yaml b/k8s/charts/oxicloud/Chart.yaml index 50069e2..a412671 100644 --- a/k8s/charts/oxicloud/Chart.yaml +++ b/k8s/charts/oxicloud/Chart.yaml @@ -5,4 +5,4 @@ description: | Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust. type: application version: 0.1.0 -appVersion: "0.5.2" +appVersion: "0.6.0" diff --git a/k8s/charts/oxicloud/templates/statefulset.yaml b/k8s/charts/oxicloud/templates/statefulset.yaml index 2a6d68e..442fac1 100644 --- a/k8s/charts/oxicloud/templates/statefulset.yaml +++ b/k8s/charts/oxicloud/templates/statefulset.yaml @@ -17,7 +17,7 @@ spec: spec: containers: - name: oxicloud - image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" imagePullPolicy: {{ .Values.image.pullPolicy }} ports: - name: http diff --git a/k8s/charts/oxicloud/values.yaml b/k8s/charts/oxicloud/values.yaml index 3bbd384..dbaca4c 100644 --- a/k8s/charts/oxicloud/values.yaml +++ b/k8s/charts/oxicloud/values.yaml @@ -1,17 +1,12 @@ --- replicaCount: 1 -image: - repository: oxicloud - pullPolicy: IfNotPresent - tag: "latest" -database: - host: "postgres.example.com" - port: 5432 - username: "postgres" - password: "change_me_in_production" - name: "oxicloud" + +image: + repository: diocrafts/oxicloud + pullpolicy: Always + tag: "" config: server: From b8ffb3eef4900e6e180b1cddd6fc02e69610666c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 9 Jun 2026 03:52:33 +0000 Subject: [PATCH 18/44] chore(deps): update helm release renovate to 46.184.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index e4fe9be..ce5a885 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.181.* + targetRevision: 46.184.* helm: valuesObject: renovate: From 45762a247574a6de945965cde03e0be9ebc254ea Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 11 Jun 2026 04:04:17 +0000 Subject: [PATCH 19/44] chore(deps): update terraform authentik to v2026.5.0 --- tofu/authentik/.terraform.lock.hcl | 56 +++++++++---------- tofu/authentik/main.tf | 2 +- tofu/modules/authentik-app/main.tf | 2 +- .../authentik-ldap/.terraform.lock.hcl | 56 +++++++++---------- tofu/modules/authentik-ldap/main.tf | 2 +- tofu/modules/authentik-oidc/main.tf | 2 +- tofu/modules/authentik-proxy/main.tf | 2 +- 7 files changed, 61 insertions(+), 61 deletions(-) diff --git a/tofu/authentik/.terraform.lock.hcl b/tofu/authentik/.terraform.lock.hcl index 71b1759..22b34f9 100644 --- a/tofu/authentik/.terraform.lock.hcl +++ b/tofu/authentik/.terraform.lock.hcl @@ -2,34 +2,34 @@ # Manual edits may be lost in future updates. provider "registry.opentofu.org/goauthentik/authentik" { - version = "2026.2.0" - constraints = "2026.2.0" + version = "2026.5.0" + constraints = "2026.5.0" hashes = [ - "h1:/y7//ItB3vYvtDzSgrd7eY4QHGQ7b2G/rF/rtXdvUiY=", - "h1:2MTCDpaUJ9AAckFf+lfhq5VNkl4/e1is7XIHfjFX20U=", - "h1:EECfgcbT6h+ppgQ3x06iQZSheZ4vJ6NVwXGYGzyuQQ4=", - "h1:Hg5gBZc/mPbMwH3r5AVbDycUFoeh1LlHtAvVKsnruTY=", - "h1:J9+XlKbvc8x99ZV779XH0swZhsJo+Zcrh7UCK5pKQKY=", - "h1:On3/Zzv3W72aGsJ4AhW/tnpi4hvq9cxwgf7tF6Tg+a4=", - "h1:imSeB1o2GiuyBKsK6prOkOT7dQVDK42TaxGWAb+wEvg=", - "h1:jpOkyfrzbb/LBCdW/0R2Ag+X9bRw6X1/2BRMoImfgQ8=", - "h1:pT8YP3VDxKxhT1X+UXmjN78C+8NNb3fIANWNjR0xRX4=", - "h1:pum2uBRNDUjPeP9aYszm+6GU+K7tZIpbbLrsN39l8iw=", - "h1:qYcmNSTHIU6XefHE11SmywKqgp84B6n2Fzwdj/8dRN8=", - "h1:zH1hHNBUvxXZBzxyQa6OPjDAlZyr3rA7LqwTVVZDW9s=", - "h1:zacZCsqLyCstv+qE+VhFvwCIGLQEdNBsMIM7r9umUSQ=", - "zh:00c44e8ee842e75de9cc4fd6193b10258d1dc840e5be4aaaf118ffc180dceee0", - "zh:13057f08bce3b63613e1be3997dd454ff9568c569dd983987b1550280fbe3d01", - "zh:410a1ff2ae4647cc0ab37894f81e4d474b588a0a7f005d05d55e8c3a40978dd2", - "zh:43830834d12b3c0eeabe397842f82ca3a6b58a5bc8dd837d55b821419b55ed61", - "zh:56eaedd196ed7c4003cee0434b891b38242b4fde2031978d0ddcfdf6e16ee5ad", - "zh:5b3c10bb63c3c215ed9e0918e5808b240e3f2ee8248d10cd4d824a4998a213c5", - "zh:99c14891bcb92a6b21ef4c0e60f6c0df23e3452808f3eefd67cde78d132c80d9", - "zh:9a32cdda9f939f8484e27d4200d004c44f016fe97579a111201083f4beea78e8", - "zh:ae5086816144f68de9a0002e7696321169a71473f9d161793f4ae996388f56de", - "zh:bd09409dd34608a4ef3ea80cfc5e397268e7872f2e84c1ccdc9b5698e36ddad5", - "zh:be7af8b9eb61b0eb5053f14360e5a68caeb32c115efe8e1b583f2e7c91352a2a", - "zh:e11726812a1b2caf6b6784a3d074d1f50e3d406e9629c02096a001e5a5979331", - "zh:e39183d10d8158ccab51208f4f727c7419b1b1e596f4feb23dc42aebb36d01e3", + "h1:0uyEY3Pv2BwFGTKmKmzYjZJTNWgqR2zK9INfGh4z14U=", + "h1:42thcpGwbL/R3NCSQ4kCpTrACT/TkrX/RR19aTE1jNI=", + "h1:KeTxGgORC8K5bDyhLoQv60bV89WJhYPIoQey+BE3jCs=", + "h1:Rqfb/iEWvuaBai5EGcsfpkoo5cWiwfT2+uS2jq53K4A=", + "h1:SeznjPKBzSrgo8WasRnuxiGMDSeQHEKsv3U/xw8bhQE=", + "h1:V8nQUa7FpHo5eNJmt5OLfFmfEyzEbKtQJVhgQ9Hdwoc=", + "h1:ZxTA6F65lOQwHRUv6aGmjpMjU2nWeiZml3jlGaMYhUQ=", + "h1:aUAK4ogW16tyIv+CLUyIkuXMOTQXENd4DQT1COyu5o8=", + "h1:cyP/vmLA2galua5ItpdS+rTFpNIewwCgZGYxy0HZ5nA=", + "h1:db5oMNuPhgNOYZH8HgMGGJmoqaqKYkPgl4gkx4OlgSc=", + "h1:eKMsm5T+A4ADNRGzpcOvd78grn6VegXwSL0gIPOJ6oI=", + "h1:qb+bDi9md5ucsjz6UFsPBoT1Xa901ymztij6HRNoKag=", + "h1:ugLfV0/T5lyTCDR6NanKa42Pwrlug06QuIuWbn8KVFU=", + "zh:0dc1706f6fbff866f4a96de56a4934b9a277954bcdd0713549a29a9b8ec85153", + "zh:218417ec4e864f2d7e585d6c08d39bccb96d8f3bca16c6f762be15365e434234", + "zh:24f9afa7a1174316da3478811848cd76ef348d8a983310b8d75ed6f45abe1a92", + "zh:560092e47cb8a72b890b3eeafe1803202cd25cf27f5f5a6e2c370f645f5d86ae", + "zh:5bc69d8de198007ad1587e146f98cffacf0d1a571800da549b308ff5f4541474", + "zh:65248dce941472ad2a30d0754d2f3c2db6bb6fe5080946316fb097d6ba7cc79f", + "zh:79c9a59a8d3c60280e27a064668889594da44c60f940b046b7c8e63be01067d0", + "zh:87f26cadcd842d6e6d0af94ef0e56860557f5d07f487b10d69d38b63af68bea5", + "zh:8e42c9d0e77d61cc2e5f8c8b761f6e484774d93771927b4cb5fbdae41209dd33", + "zh:94ff632b9b4841527c6b652d51a850a8a47c84c0308a3efc189e0ff7e2558f87", + "zh:b8d32d9f17a905b63c87a23306c02c295b7c8b70f72950071aa3086396932816", + "zh:c91982af99474fc2e4e69be36ed3a68847f261963ed79f6a546fc75703992f99", + "zh:eb9c1fd3020cf61e9b7a6a38d2965f4b521495a9928705e963459a4af857f97d", ] } diff --git a/tofu/authentik/main.tf b/tofu/authentik/main.tf index ba31337..7829c5f 100644 --- a/tofu/authentik/main.tf +++ b/tofu/authentik/main.tf @@ -8,7 +8,7 @@ terraform { required_providers { authentik = { source = "goauthentik/authentik" - version = "2026.2.0" + version = "2026.5.0" } } } diff --git a/tofu/modules/authentik-app/main.tf b/tofu/modules/authentik-app/main.tf index cb0f8fc..6527b1c 100644 --- a/tofu/modules/authentik-app/main.tf +++ b/tofu/modules/authentik-app/main.tf @@ -3,7 +3,7 @@ terraform { required_providers { authentik = { source = "goauthentik/authentik" - version = "2026.2.0" + version = "2026.5.0" } } } diff --git a/tofu/modules/authentik-ldap/.terraform.lock.hcl b/tofu/modules/authentik-ldap/.terraform.lock.hcl index 71b1759..22b34f9 100644 --- a/tofu/modules/authentik-ldap/.terraform.lock.hcl +++ b/tofu/modules/authentik-ldap/.terraform.lock.hcl @@ -2,34 +2,34 @@ # Manual edits may be lost in future updates. provider "registry.opentofu.org/goauthentik/authentik" { - version = "2026.2.0" - constraints = "2026.2.0" + version = "2026.5.0" + constraints = "2026.5.0" hashes = [ - "h1:/y7//ItB3vYvtDzSgrd7eY4QHGQ7b2G/rF/rtXdvUiY=", - "h1:2MTCDpaUJ9AAckFf+lfhq5VNkl4/e1is7XIHfjFX20U=", - "h1:EECfgcbT6h+ppgQ3x06iQZSheZ4vJ6NVwXGYGzyuQQ4=", - "h1:Hg5gBZc/mPbMwH3r5AVbDycUFoeh1LlHtAvVKsnruTY=", - "h1:J9+XlKbvc8x99ZV779XH0swZhsJo+Zcrh7UCK5pKQKY=", - "h1:On3/Zzv3W72aGsJ4AhW/tnpi4hvq9cxwgf7tF6Tg+a4=", - "h1:imSeB1o2GiuyBKsK6prOkOT7dQVDK42TaxGWAb+wEvg=", - "h1:jpOkyfrzbb/LBCdW/0R2Ag+X9bRw6X1/2BRMoImfgQ8=", - "h1:pT8YP3VDxKxhT1X+UXmjN78C+8NNb3fIANWNjR0xRX4=", - "h1:pum2uBRNDUjPeP9aYszm+6GU+K7tZIpbbLrsN39l8iw=", - "h1:qYcmNSTHIU6XefHE11SmywKqgp84B6n2Fzwdj/8dRN8=", - "h1:zH1hHNBUvxXZBzxyQa6OPjDAlZyr3rA7LqwTVVZDW9s=", - "h1:zacZCsqLyCstv+qE+VhFvwCIGLQEdNBsMIM7r9umUSQ=", - "zh:00c44e8ee842e75de9cc4fd6193b10258d1dc840e5be4aaaf118ffc180dceee0", - "zh:13057f08bce3b63613e1be3997dd454ff9568c569dd983987b1550280fbe3d01", - "zh:410a1ff2ae4647cc0ab37894f81e4d474b588a0a7f005d05d55e8c3a40978dd2", - "zh:43830834d12b3c0eeabe397842f82ca3a6b58a5bc8dd837d55b821419b55ed61", - "zh:56eaedd196ed7c4003cee0434b891b38242b4fde2031978d0ddcfdf6e16ee5ad", - "zh:5b3c10bb63c3c215ed9e0918e5808b240e3f2ee8248d10cd4d824a4998a213c5", - "zh:99c14891bcb92a6b21ef4c0e60f6c0df23e3452808f3eefd67cde78d132c80d9", - "zh:9a32cdda9f939f8484e27d4200d004c44f016fe97579a111201083f4beea78e8", - "zh:ae5086816144f68de9a0002e7696321169a71473f9d161793f4ae996388f56de", - "zh:bd09409dd34608a4ef3ea80cfc5e397268e7872f2e84c1ccdc9b5698e36ddad5", - "zh:be7af8b9eb61b0eb5053f14360e5a68caeb32c115efe8e1b583f2e7c91352a2a", - "zh:e11726812a1b2caf6b6784a3d074d1f50e3d406e9629c02096a001e5a5979331", - "zh:e39183d10d8158ccab51208f4f727c7419b1b1e596f4feb23dc42aebb36d01e3", + "h1:0uyEY3Pv2BwFGTKmKmzYjZJTNWgqR2zK9INfGh4z14U=", + "h1:42thcpGwbL/R3NCSQ4kCpTrACT/TkrX/RR19aTE1jNI=", + "h1:KeTxGgORC8K5bDyhLoQv60bV89WJhYPIoQey+BE3jCs=", + "h1:Rqfb/iEWvuaBai5EGcsfpkoo5cWiwfT2+uS2jq53K4A=", + "h1:SeznjPKBzSrgo8WasRnuxiGMDSeQHEKsv3U/xw8bhQE=", + "h1:V8nQUa7FpHo5eNJmt5OLfFmfEyzEbKtQJVhgQ9Hdwoc=", + "h1:ZxTA6F65lOQwHRUv6aGmjpMjU2nWeiZml3jlGaMYhUQ=", + "h1:aUAK4ogW16tyIv+CLUyIkuXMOTQXENd4DQT1COyu5o8=", + "h1:cyP/vmLA2galua5ItpdS+rTFpNIewwCgZGYxy0HZ5nA=", + "h1:db5oMNuPhgNOYZH8HgMGGJmoqaqKYkPgl4gkx4OlgSc=", + "h1:eKMsm5T+A4ADNRGzpcOvd78grn6VegXwSL0gIPOJ6oI=", + "h1:qb+bDi9md5ucsjz6UFsPBoT1Xa901ymztij6HRNoKag=", + "h1:ugLfV0/T5lyTCDR6NanKa42Pwrlug06QuIuWbn8KVFU=", + "zh:0dc1706f6fbff866f4a96de56a4934b9a277954bcdd0713549a29a9b8ec85153", + "zh:218417ec4e864f2d7e585d6c08d39bccb96d8f3bca16c6f762be15365e434234", + "zh:24f9afa7a1174316da3478811848cd76ef348d8a983310b8d75ed6f45abe1a92", + "zh:560092e47cb8a72b890b3eeafe1803202cd25cf27f5f5a6e2c370f645f5d86ae", + "zh:5bc69d8de198007ad1587e146f98cffacf0d1a571800da549b308ff5f4541474", + "zh:65248dce941472ad2a30d0754d2f3c2db6bb6fe5080946316fb097d6ba7cc79f", + "zh:79c9a59a8d3c60280e27a064668889594da44c60f940b046b7c8e63be01067d0", + "zh:87f26cadcd842d6e6d0af94ef0e56860557f5d07f487b10d69d38b63af68bea5", + "zh:8e42c9d0e77d61cc2e5f8c8b761f6e484774d93771927b4cb5fbdae41209dd33", + "zh:94ff632b9b4841527c6b652d51a850a8a47c84c0308a3efc189e0ff7e2558f87", + "zh:b8d32d9f17a905b63c87a23306c02c295b7c8b70f72950071aa3086396932816", + "zh:c91982af99474fc2e4e69be36ed3a68847f261963ed79f6a546fc75703992f99", + "zh:eb9c1fd3020cf61e9b7a6a38d2965f4b521495a9928705e963459a4af857f97d", ] } diff --git a/tofu/modules/authentik-ldap/main.tf b/tofu/modules/authentik-ldap/main.tf index 76bf980..7567cc9 100644 --- a/tofu/modules/authentik-ldap/main.tf +++ b/tofu/modules/authentik-ldap/main.tf @@ -3,7 +3,7 @@ terraform { required_providers { authentik = { source = "goauthentik/authentik" - version = "2026.2.0" + version = "2026.5.0" } } } diff --git a/tofu/modules/authentik-oidc/main.tf b/tofu/modules/authentik-oidc/main.tf index 6082b7f..8c7c23e 100644 --- a/tofu/modules/authentik-oidc/main.tf +++ b/tofu/modules/authentik-oidc/main.tf @@ -3,7 +3,7 @@ terraform { required_providers { authentik = { source = "goauthentik/authentik" - version = "2026.2.0" + version = "2026.5.0" } } } diff --git a/tofu/modules/authentik-proxy/main.tf b/tofu/modules/authentik-proxy/main.tf index cdb97c5..a4d11bb 100644 --- a/tofu/modules/authentik-proxy/main.tf +++ b/tofu/modules/authentik-proxy/main.tf @@ -3,7 +3,7 @@ terraform { required_providers { authentik = { source = "goauthentik/authentik" - version = "2026.2.0" + version = "2026.5.0" } } } From 852bc5e84564030007f86ae3f820fa34be53f92d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 11 Jun 2026 04:02:07 +0000 Subject: [PATCH 20/44] chore(deps): update code.forgejo.org/forgejo-helm/forgejo docker tag to v17.1.1 --- k8s/argo-apps/forgejo.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/forgejo.yaml b/k8s/argo-apps/forgejo.yaml index f3901ec..edd0160 100644 --- a/k8s/argo-apps/forgejo.yaml +++ b/k8s/argo-apps/forgejo.yaml @@ -14,7 +14,7 @@ spec: sources: - chart: forgejo repoURL: code.forgejo.org/forgejo-helm - targetRevision: 17.1.0 + targetRevision: 17.1.1 helm: valuesObject: replicaCount: 1 From ec9c9527ec27ea6e5769d3c870d42cc8aee7015e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 10 Jun 2026 04:18:10 +0000 Subject: [PATCH 21/44] chore(deps): update ghcr.io/zibbp/ganymede docker tag to v4.17.1 --- docker/ganymede/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/ganymede/docker-compose.yml b/docker/ganymede/docker-compose.yml index 201213e..95babc0 100644 --- a/docker/ganymede/docker-compose.yml +++ b/docker/ganymede/docker-compose.yml @@ -2,7 +2,7 @@ services: ganymede: container_name: ganymede - image: ghcr.io/zibbp/ganymede:4.17.0 + image: ghcr.io/zibbp/ganymede:4.17.1 restart: unless-stopped environment: DEBUG: ${GANYMEDE_DEBUG:-false} From 765247f90eb870fb5b20a1e417bcce92fbdcbfd0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 11 Jun 2026 04:03:10 +0000 Subject: [PATCH 22/44] chore(deps): update helm release renovate to 46.187.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index ce5a885..0c859ae 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.184.* + targetRevision: 46.187.* helm: valuesObject: renovate: From c3bdf244fbe09ac605c2fce2f39a6e107ee5d72b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 12 Jun 2026 03:39:45 +0000 Subject: [PATCH 23/44] chore(deps): update helm release kured to v6 --- k8s/argo-apps/kured.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/kured.yaml b/k8s/argo-apps/kured.yaml index ff3d18e..5b341fd 100644 --- a/k8s/argo-apps/kured.yaml +++ b/k8s/argo-apps/kured.yaml @@ -13,7 +13,7 @@ spec: source: chart: kured repoURL: https://kubereboot.github.io/charts - targetRevision: 5.12.* + targetRevision: 6.0.* helm: valuesObject: configuration.rebootDays: From ab3921f463f3ed054e409c787cd3debfa2a75048 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 20 Jun 2026 02:56:48 +0000 Subject: [PATCH 24/44] chore(deps): update helm release renovate to 46.200.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 0c859ae..511fed6 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.187.* + targetRevision: 46.200.* helm: valuesObject: renovate: From fc350e0c299ae332622315728b27180bbfcefab7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 19 Jun 2026 03:13:34 +0000 Subject: [PATCH 25/44] chore(deps): update https://code.forgejo.org/actions/checkout action to v7 --- .forgejo/workflows/ci.yaml | 6 +++--- .forgejo/workflows/deploy-tofu.yaml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.forgejo/workflows/ci.yaml b/.forgejo/workflows/ci.yaml index 4d1bf40..ed5f8c0 100644 --- a/.forgejo/workflows/ci.yaml +++ b/.forgejo/workflows/ci.yaml @@ -7,7 +7,7 @@ jobs: pre-commit: runs-on: ubuntu-22.04 steps: - - uses: https://code.forgejo.org/actions/checkout@v6 + - uses: https://code.forgejo.org/actions/checkout@v7 - uses: https://code.forgejo.org/actions/setup-python@v6 with: python-version: '3.10' @@ -19,7 +19,7 @@ jobs: k8s: runs-on: ubuntu-22.04 steps: - - uses: https://code.forgejo.org/actions/checkout@v6 + - uses: https://code.forgejo.org/actions/checkout@v7 - name: Set up Kubeconform uses: bmuschko/setup-kubeconform@v1 @@ -30,7 +30,7 @@ jobs: tflint: runs-on: ubuntu-22.04 steps: - - uses: https://code.forgejo.org/actions/checkout@v6 + - uses: https://code.forgejo.org/actions/checkout@v7 - uses: terraform-linters/setup-tflint@v6 name: Setup TFLint with: diff --git a/.forgejo/workflows/deploy-tofu.yaml b/.forgejo/workflows/deploy-tofu.yaml index 543f381..070f24a 100644 --- a/.forgejo/workflows/deploy-tofu.yaml +++ b/.forgejo/workflows/deploy-tofu.yaml @@ -10,7 +10,7 @@ jobs: authentik: runs-on: ubuntu-22.04 steps: - - uses: https://code.forgejo.org/actions/checkout@v6 + - uses: https://code.forgejo.org/actions/checkout@v7 - uses: opentofu/setup-opentofu@v2 with: tofu_version: 1.8.1 @@ -40,7 +40,7 @@ jobs: adguard: runs-on: ubuntu-22.04 steps: - - uses: https://code.forgejo.org/actions/checkout@v6 + - uses: https://code.forgejo.org/actions/checkout@v7 - uses: opentofu/setup-opentofu@v2 with: tofu_version: 1.7.0 From ec6daed447d9ed5b74a827f16bfa4ec858ec2e73 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 17 Jun 2026 02:35:44 +0000 Subject: [PATCH 26/44] chore(deps): update helm release meilisearch to 0.33.* --- k8s/argo-apps/meili.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/meili.yaml b/k8s/argo-apps/meili.yaml index 9303052..61faaa1 100644 --- a/k8s/argo-apps/meili.yaml +++ b/k8s/argo-apps/meili.yaml @@ -18,7 +18,7 @@ spec: targetRevision: main - chart: meilisearch repoURL: https://meilisearch.github.io/meilisearch-kubernetes - targetRevision: 0.32.* + targetRevision: 0.33.* helm: valuesObject: environment: From 4d7cebbc244c9a639741b36891b7cca74f7ee3b6 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 16 Jun 2026 02:58:35 +0000 Subject: [PATCH 27/44] chore(deps): update plutonhq/pluton docker tag to v0.17.0 --- docker/pluton/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/pluton/docker-compose.yml b/docker/pluton/docker-compose.yml index a319abe..edd569d 100644 --- a/docker/pluton/docker-compose.yml +++ b/docker/pluton/docker-compose.yml @@ -1,7 +1,7 @@ --- services: pluton: - image: plutonhq/pluton:0.16.6 + image: plutonhq/pluton:0.17.0 container_name: pluton-backup restart: always ports: From 44626b225a38497068d18f6387e803a99059a58e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 24 Jun 2026 03:24:01 +0000 Subject: [PATCH 28/44] chore(deps): update helm release renovate to 46.206.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 511fed6..0c83679 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.200.* + targetRevision: 46.206.* helm: valuesObject: renovate: From 154fdb823efa87bfa31265d8516b9f6cff58f3d5 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 22 Jun 2026 03:24:46 +0000 Subject: [PATCH 29/44] chore(deps): update ghcr.io/zibbp/ganymede docker tag to v4.18.0 --- docker/ganymede/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/ganymede/docker-compose.yml b/docker/ganymede/docker-compose.yml index 95babc0..5146a15 100644 --- a/docker/ganymede/docker-compose.yml +++ b/docker/ganymede/docker-compose.yml @@ -2,7 +2,7 @@ services: ganymede: container_name: ganymede - image: ghcr.io/zibbp/ganymede:4.17.1 + image: ghcr.io/zibbp/ganymede:4.18.0 restart: unless-stopped environment: DEBUG: ${GANYMEDE_DEBUG:-false} From c269dbc4914f7399f1257ba3f74fdffbf3371805 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Wed, 24 Jun 2026 09:18:11 +0200 Subject: [PATCH 30/44] feat: remove ganymede --- docker/ganymede/docker-compose.yml | 48 ------------------------------ docker/ganymede/sample.env | 27 ----------------- 2 files changed, 75 deletions(-) delete mode 100644 docker/ganymede/docker-compose.yml delete mode 100644 docker/ganymede/sample.env diff --git a/docker/ganymede/docker-compose.yml b/docker/ganymede/docker-compose.yml deleted file mode 100644 index 5146a15..0000000 --- a/docker/ganymede/docker-compose.yml +++ /dev/null @@ -1,48 +0,0 @@ ---- -services: - ganymede: - container_name: ganymede - image: ghcr.io/zibbp/ganymede:4.18.0 - restart: unless-stopped - environment: - DEBUG: ${GANYMEDE_DEBUG:-false} - TZ: ${GANYMEDE_TZ:-Europe/Madrid} - VIDEOS_DIR: ${GANYMEDE_VIDEOS_DIR:-/data/videos} - TEMP_DIR: ${GANYMEDE_TEMP_DIR:-/data/temp} - LOGS_DIR: ${GANYMEDE_LOGS_DIR:-/data/logs} - CONFIG_DIR: ${GANYMEDE_CONFIG_DIR:-/data/config} - DB_HOST: ${GANYMEDE_DB_HOST:-192.168.1.3} - DB_PORT: ${GANYMEDE_DB_PORT:-5432} - DB_USER: ${GANYMEDE_DB_USER:-ganymede} - DB_PASS: ${GANYMEDE_DB_PASS} - DB_NAME: ${GANYMEDE_DB_NAME:-ganymede} - DB_SSL: ${GANYMEDE_DB_SSL:-disable} - TWITCH_CLIENT_ID: ${GANYMEDE_TWITCH_CLIENT_ID} - TWITCH_CLIENT_SECRET: ${GANYMEDE_TWITCH_CLIENT_SECRET} - MAX_CHAT_DOWNLOAD_EXECUTIONS: ${GANYMEDE_MAX_CHAT_DOWNLOAD_EXECUTIONS:-3} - MAX_CHAT_RENDER_EXECUTIONS: ${GANYMEDE_MAX_CHAT_RENDER_EXECUTIONS:-2} - MAX_VIDEO_DOWNLOAD_EXECUTIONS: ${GANYMEDE_MAX_VIDEO_DOWNLOAD_EXECUTIONS:-2} - MAX_VIDEO_CONVERT_EXECUTIONS: ${GANYMEDE_MAX_VIDEO_CONVERT_EXECUTIONS:-3} - MAX_VIDEO_SPRITE_THUMBNAIL_EXECUTIONS: ${GANYMEDE_MAX_VIDEO_SPRITE_THUMBNAIL_EXECUTIONS:-2} - OAUTH_ENABLED: ${GANYMEDE_OAUTH_ENABLED:-true} - OAUTH_PROVIDER_URL: ${GANYMEDE_OAUTH_PROVIDER_URL:-https://auth.fukurokuju.dev/application/o/ganymede/} - OAUTH_CLIENT_ID: ${GANYMEDE_OAUTH_CLIENT_ID} - OAUTH_CLIENT_SECRET: ${GANYMEDE_OAUTH_CLIENT_SECRET} - OAUTH_REDIRECT_URL: ${GANYMEDE_OAUTH_REDIRECT_URL:-https://vods.roboces.dev/api/v1/auth/oauth/callback} - SHOW_SSO_LOGIN_BUTTON: ${GANYMEDE_SHOW_SSO_LOGIN_BUTTON:-true} - FORCE_SSO_AUTH: ${GANYMEDE_FORCE_SSO_AUTH:-true} - REQUIRE_LOGIN: ${GANYMEDE_REQUIRE_LOGIN:-true} - volumes: - - ${GANYMEDE_VIDEOS:-/mnt/vods/ganymede/videos}:/data/videos - - ${GANYMEDE_TEMP:-/mnt/vods/ganymede/temp}:/data/temp - - ${GANYMEDE_CACHE:-/mnt/vods/ganymede/cache}:/data/.cache - - ${GANYMEDE_LOGS:-/mnt/vods/ganymede/logs}:/data/logs - - ${GANYMEDE_CONFIG:-/mnt/vods/ganymede/config}:/data/config - ports: - - "4800:4000" - healthcheck: - test: curl --fail http://localhost:4000/health || exit 1 - interval: 60s - retries: 5 - start_period: 60s - timeout: 10s diff --git a/docker/ganymede/sample.env b/docker/ganymede/sample.env deleted file mode 100644 index 5b2205b..0000000 --- a/docker/ganymede/sample.env +++ /dev/null @@ -1,27 +0,0 @@ -GANYMEDE_DEBUG=false -GANYMEDE_TZ=Europe/Madrid -GANYMEDE_VIDEOS_DIR=/data/videos -GANYMEDE_TEMP_DIR=/data/temp -GANYMEDE_LOGS_DIR=/data/logs -GANYMEDE_CONFIG_DIR=/data/config -GANYMEDE_DB_HOST=192.168.1.3 -GANYMEDE_DB_PORT=5432 -GANYMEDE_DB_USER=ganymede -GANYMEDE_DB_PASS= -GANYMEDE_DB_NAME=ganymede -GANYMEDE_DB_SSL=disable -GANYMEDE_TWITCH_CLIENT_ID= -GANYMEDE_TWITCH_CLIENT_SECRET= -GANYMEDE_MAX_CHAT_DOWNLOAD_EXECUTIONS=3 -GANYMEDE_MAX_CHAT_RENDER_EXECUTIONS=2 -GANYMEDE_MAX_VIDEO_DOWNLOAD_EXECUTIONS=2 -GANYMEDE_MAX_VIDEO_CONVERT_EXECUTIONS=3 -GANYMEDE_MAX_VIDEO_SPRITE_THUMBNAIL_EXECUTIONS=2 -GANYMEDE_OAUTH_ENABLED=true -GANYMEDE_OAUTH_PROVIDER_URL=https://auth.fukurokuju.dev/application/o/ganymede/ -GANYMEDE_OAUTH_CLIENT_ID= -GANYMEDE_OAUTH_CLIENT_SECRET= -GANYMEDE_OAUTH_REDIRECT_URL=https://vods.roboces.dev/api/v1/auth/oauth/callback -GANYMEDE_SHOW_SSO_LOGIN_BUTTON=true -GANYMEDE_FORCE_SSO_AUTH=false -GANYMEDE_REQUIRE_LOGIN=false From 25a6ac9870581d5ea725e9e0d94e5db85b1c0bdd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Wed, 24 Jun 2026 09:35:27 +0200 Subject: [PATCH 31/44] feat: change huesoporro's pullPolicy to ifNotPresent --- k8s/argo-apps/huesporro.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/k8s/argo-apps/huesporro.yaml b/k8s/argo-apps/huesporro.yaml index 93ac93f..7321640 100644 --- a/k8s/argo-apps/huesporro.yaml +++ b/k8s/argo-apps/huesporro.yaml @@ -15,6 +15,8 @@ spec: targetRevision: v0.3.7 helm: valuesObject: + image: + pullPolicy: IfNotPresent secret: existingSecretName: huesoporro-secrets ingress: From 398f289442b893297a8efec500969885967beefe Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 25 Jun 2026 03:37:04 +0000 Subject: [PATCH 32/44] chore(deps): update helm release portainer to 239.4.* --- k8s/argo-apps/portainer.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/portainer.yaml b/k8s/argo-apps/portainer.yaml index aec9c82..73a1383 100644 --- a/k8s/argo-apps/portainer.yaml +++ b/k8s/argo-apps/portainer.yaml @@ -15,7 +15,7 @@ spec: sources: - repoURL: https://portainer.github.io/k8s/ chart: portainer - targetRevision: 239.3.* + targetRevision: 239.4.* helm: valuesObject: service: From d33ac46d7cafa4eb4372fbe70c15cb0168d73cb0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 27 Jun 2026 03:33:42 +0000 Subject: [PATCH 33/44] chore(deps): update helm release renovate to 46.209.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 0c83679..5a142b2 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.206.* + targetRevision: 46.209.* helm: valuesObject: renovate: From 0ebff5eda98e84338ff417f229aaf30c81aee86f Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 29 Jun 2026 03:37:46 +0000 Subject: [PATCH 34/44] chore(deps): update helm release renovate to 46.211.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 5a142b2..36157ff 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.209.* + targetRevision: 46.211.* helm: valuesObject: renovate: From 67a19bcccfbb983b346685feeb8df9c6cd13d51e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sun, 28 Jun 2026 03:34:47 +0000 Subject: [PATCH 35/44] chore(deps): update ghcr.io/woodpecker-ci/helm/woodpecker docker tag to v3.6.5 --- k8s/argo-apps/woodpecker.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/woodpecker.yaml b/k8s/argo-apps/woodpecker.yaml index 87bee3e..cda7560 100644 --- a/k8s/argo-apps/woodpecker.yaml +++ b/k8s/argo-apps/woodpecker.yaml @@ -14,7 +14,7 @@ spec: sources: - chart: woodpecker repoURL: ghcr.io/woodpecker-ci/helm - targetRevision: 3.6.4 + targetRevision: 3.6.5 helm: valuesObject: agent: From 115bfeb7545eba24b7132b5c7ae273c7c3957b71 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 1 Jul 2026 03:11:30 +0000 Subject: [PATCH 36/44] chore(deps): update helm release kured to 6.1.* --- k8s/argo-apps/kured.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/kured.yaml b/k8s/argo-apps/kured.yaml index 5b341fd..5ab7b1d 100644 --- a/k8s/argo-apps/kured.yaml +++ b/k8s/argo-apps/kured.yaml @@ -13,7 +13,7 @@ spec: source: chart: kured repoURL: https://kubereboot.github.io/charts - targetRevision: 6.0.* + targetRevision: 6.1.* helm: valuesObject: configuration.rebootDays: From aefa594c6951482021e1279ca2f3187784062e08 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 1 Jul 2026 03:11:57 +0000 Subject: [PATCH 37/44] chore(deps): update helm release renovate to 46.214.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 36157ff..79a3954 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.211.* + targetRevision: 46.214.* helm: valuesObject: renovate: From 23b4df470e99b64b96d6a4a3d5036fce95ce9fcb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Sat, 4 Jul 2026 13:16:00 +0200 Subject: [PATCH 38/44] feat: update oxicloud appVersion 0.8.0 --- k8s/charts/oxicloud/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/charts/oxicloud/Chart.yaml b/k8s/charts/oxicloud/Chart.yaml index a412671..fdf5f78 100644 --- a/k8s/charts/oxicloud/Chart.yaml +++ b/k8s/charts/oxicloud/Chart.yaml @@ -5,4 +5,4 @@ description: | Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust. type: application version: 0.1.0 -appVersion: "0.6.0" +appVersion: "0.8.0" From 5eb467f645ae8b9205eb3bcc651da8ad280c5000 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Sun, 5 Jul 2026 14:02:58 +0200 Subject: [PATCH 39/44] feat: update oxicloud appVersion 0.8.1 --- k8s/charts/oxicloud/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/charts/oxicloud/Chart.yaml b/k8s/charts/oxicloud/Chart.yaml index fdf5f78..3a87cec 100644 --- a/k8s/charts/oxicloud/Chart.yaml +++ b/k8s/charts/oxicloud/Chart.yaml @@ -5,4 +5,4 @@ description: | Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust. type: application version: 0.1.0 -appVersion: "0.8.0" +appVersion: "0.8.1" From 0c0588596d574f1128d174242413f691efe57089 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 6 Jul 2026 03:45:29 +0000 Subject: [PATCH 40/44] chore(deps): update plutonhq/pluton docker tag to v0.17.1 --- docker/pluton/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/pluton/docker-compose.yml b/docker/pluton/docker-compose.yml index edd569d..bcd297a 100644 --- a/docker/pluton/docker-compose.yml +++ b/docker/pluton/docker-compose.yml @@ -1,7 +1,7 @@ --- services: pluton: - image: plutonhq/pluton:0.17.0 + image: plutonhq/pluton:0.17.1 container_name: pluton-backup restart: always ports: From 2703ce2390686d1c5e8086f8114785dcd833d965 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 6 Jul 2026 03:45:59 +0000 Subject: [PATCH 41/44] chore(deps): update helm release renovate to 46.217.* --- k8s/argo-apps/renovate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/argo-apps/renovate.yaml b/k8s/argo-apps/renovate.yaml index 79a3954..befc166 100644 --- a/k8s/argo-apps/renovate.yaml +++ b/k8s/argo-apps/renovate.yaml @@ -13,7 +13,7 @@ spec: sources: - chart: renovate repoURL: https://docs.renovatebot.com/helm-charts - targetRevision: 46.214.* + targetRevision: 46.217.* helm: valuesObject: renovate: From ad776b9cb72e59482b06c00920b87d8ac85869f0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jul 2026 03:37:40 +0000 Subject: [PATCH 42/44] chore(deps): update tailscale/tailscale docker tag to v1.98.8 --- docker/tailscale/docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/tailscale/docker-compose.yml b/docker/tailscale/docker-compose.yml index 39bacf7..422a0a3 100644 --- a/docker/tailscale/docker-compose.yml +++ b/docker/tailscale/docker-compose.yml @@ -1,7 +1,7 @@ --- services: tailscale: - image: tailscale/tailscale:v1.98.4 + image: tailscale/tailscale:v1.98.8 hostname: tailscale environment: TS_AUTHKEY: ${TS_AUTHKEY} From 7f3e0ca992c951bad9ae978393c9792ae7df0ec3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?c=C4=83t=C4=83lin?= Date: Tue, 7 Jul 2026 10:05:00 +0200 Subject: [PATCH 43/44] feat: update oxicloud to 0.8.2 --- k8s/charts/oxicloud/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/charts/oxicloud/Chart.yaml b/k8s/charts/oxicloud/Chart.yaml index 3a87cec..7bc79ac 100644 --- a/k8s/charts/oxicloud/Chart.yaml +++ b/k8s/charts/oxicloud/Chart.yaml @@ -5,4 +5,4 @@ description: | Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust. type: application version: 0.1.0 -appVersion: "0.8.1" +appVersion: "0.8.2" From 0898f744eb12d96e0ffd026715548b4b12c557e7 Mon Sep 17 00:00:00 2001 From: Hane Date: Tue, 7 Jul 2026 15:03:17 +0000 Subject: [PATCH 44/44] feat: introducing immich! Reviewed-on: https://git.roboces.dev/catalin/fukuops/pulls/717 --- docker/immich/docker-compose.yml | 34 ++++++++++++++++++++++++++++++++ docker/immich/sample.env | 16 +++++++++++++++ 2 files changed, 50 insertions(+) create mode 100644 docker/immich/docker-compose.yml create mode 100644 docker/immich/sample.env diff --git a/docker/immich/docker-compose.yml b/docker/immich/docker-compose.yml new file mode 100644 index 0000000..af05a5f --- /dev/null +++ b/docker/immich/docker-compose.yml @@ -0,0 +1,34 @@ +--- + +name: immich + +services: + immich-server: + container_name: immich_server + image: ghcr.io/immich-app/immich-server:v3.0.1 + restart: unless-stopped + volumes: + - ${IMMICH_UPLOAD_LOCATION:-/mnt/nas1/shared/immich}:/data + environment: + TZ: ${IMMICH_TZ:-Europe/Madrid} + DB_HOSTNAME: ${IMMICH_DB_HOSTNAME} + DB_PORT: ${IMMICH_DB_PORT} + DB_USERNAME: ${IMMICH_DB_USERNAME} + DB_PASSWORD: ${IMMICH_DB_PASSWORD} + DB_DATABASE_NAME: ${IMMICH_DB_DATABASE_NAME} + REDIS_HOSTNAME: ${IMMICH_REDIS_HOSTNAME} + REDIS_PORT: ${IMMICH_REDIS_PORT} + REDIS_USERNAME: ${IMMICH_REDIS_USERNAME} + REDIS_PASSWORD: ${IMMICH_REDIS_PASSWORD} + REDIS_DBINDEX: ${IMMICH_REDIS_DBINDEX} + ports: + - '2283:2283' + + immich-machine-learning: + container_name: immich_machine_learning + image: ghcr.io/immich-app/immich-machine-learning:v3.0.1 + ports: + - "3003:3003" + volumes: + - ${IMMICH_ML_MODEL_CACHE_LOCATION:-/mnt/nas1/shared/immich-model-cache}:/cache + restart: unless-stopped diff --git a/docker/immich/sample.env b/docker/immich/sample.env new file mode 100644 index 0000000..421baa6 --- /dev/null +++ b/docker/immich/sample.env @@ -0,0 +1,16 @@ +IMMICH_UPLOAD_LOCATION=/mnt/nas1/shared/immich +IMMICH_TZ=Europe/Madrid + +IMMICH_DB_HOSTNAME=192.168.1.3 +IMMICH_DB_PORT=55432 +IMMICH_DB_USERNAME= +IMMICH_DB_PASSWORD= +IMMICH_DB_DATABASE_NAME= + +IMMICH_REDIS_HOSTNAME=192.168.1.3 +IMMICH_REDIS_PORT=300036 +IMMICH_REDIS_USERNAME= +IMMICH_REDIS_PASSWORD= +IMMICH_REDIS_DBINDEX= + +IMMICH_ML_MODEL_CACHE_LOCATION=/mnt/nas1/shared/immich-model-cache