Merge pull request 'Update git.kluster.moll.re/remoll/dns Docker tag to v0.0.2-build.124' (#741) from renovate/git.kluster.moll.re-remoll-dns-0.x into main

Reviewed-on: #734

apps/adguard/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 images:
   - name: adguard/adguardhome
     newName: adguard/adguardhome
-    newTag: v0.107.69
+    newTag: v0.107.71
 
 namespace: adguard
 

apps/audiobookshelf/ingress.yaml

@@ -9,9 +9,20 @@ spec:
   routes:
   - match: Host(`audiobookshelf.kluster.moll.re`)
     kind: Rule
+    middlewares:
+    - name: buffering
     services:
     - name: audiobookshelf-web
       port: 80
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: buffering
+spec:
+  buffering:
+    maxRequestBodyBytes: 10000000000 # approx 10gb
+    memRequestBodyBytes: 1048576

apps/audiobookshelf/kustomization.yaml

@@ -12,4 +12,4 @@ namespace: audiobookshelf
 images:
   - name: audiobookshelf
     newName: ghcr.io/advplyr/audiobookshelf
-    newTag: "2.29.0"
+    newTag: "2.31.0"

apps/files/kustomization.yaml

@@ -13,4 +13,4 @@ namespace: files
 images:
   - name: ocis
     newName: owncloud/ocis
-    newTag: "7.3.0"
+    newTag: "7.3.1"

apps/finance/kustomization.yaml

@@ -14,4 +14,4 @@ resources:
 images:
   - name: actualbudget
     newName: actualbudget/actual-server
-    newTag: 25.11.0
+    newTag: 25.12.0

apps/grafana/kustomization.yaml

@@ -17,5 +17,5 @@ helmCharts:
   - releaseName: grafana
     name: grafana
     repo: https://grafana.github.io/helm-charts
-    version: 10.1.4
+    version: 10.3.1
     valuesFile: grafana.values.yaml

apps/homeassistant/base/kustomization.yaml

@@ -13,7 +13,7 @@ resources:
 images:
   - name: homeassistant
     newName: homeassistant/home-assistant
-    newTag: "2025.10"
+    newTag: "2025.12"
 
 configurations:
   # allow nameReference to work with different mentions of the same resource as well

apps/immich/ingress.yaml

@@ -18,7 +18,7 @@ spec:
   entryPoints:
     - websecure
   routes:
-    - match: Host(`immich.kluster.moll.re`)
+    - match: Host(`immich.kluster.moll.re`) || Host(`photos.kluster.moll.re`)
       kind: Rule
       services:
         - name: immich-server

apps/immich/kustomization.yaml

@@ -15,13 +15,13 @@ namespace: immich
 helmCharts:
   - name: immich
     releaseName: immich
-    version: 0.10.1
+    version: 0.10.3
     valuesFile: values.yaml
     repo: https://immich-app.github.io/immich-charts
 
 
 images:
   - name: ghcr.io/immich-app/immich-machine-learning
-    newTag: v2.1.0
+    newTag: v2.3.1
   - name: ghcr.io/immich-app/immich-server
-    newTag: v2.1.0
+    newTag: v2.3.1

apps/immich/servicemonitor.yaml

@@ -6,9 +6,9 @@ spec:
   endpoints:
   - port: metrics-api
     scheme: http
-  - port: metrics-ms
-    scheme: http
+    path: /metrics
   selector:
     matchLabels:
-      app.kubernetes.io/name: server
+      # app.kubernetes.io/name: server
       app.kubernetes.io/service: immich-server
+      app.kubernetes.io/instance: immich

apps/kitchenowl/ingress.yaml

@@ -8,10 +8,22 @@ spec:
     - websecure
   routes:
   - match: Host(`kitchen.kluster.moll.re`)
+    middlewares:
+      - name: kitchenowl
     kind: Rule
     services:
     - name: kitchenowl-web
       port: 8080
 
   tls:
-    certResolver: default-tls 
+    certResolver: default-tls
+---
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: kitchenowl
+spec:
+  headers:
+    customRequestHeaders:
+      X-Forwarded-Proto: "https"
+      Upgrade: "websocket"

apps/linkding/kustomization.yaml

@@ -13,4 +13,4 @@ namespace: linkding
 images:
   - name: linkding
     newName: sissbruecker/linkding
-    newTag: "1.44.1"
+    newTag: "1.44.2"

apps/media/kustomization.yaml

@@ -12,4 +12,4 @@ resources:
 images:
   - name: jellyfin/jellyfin
     newName: jellyfin/jellyfin
-    newTag: 10.11.2
+    newTag: 10.11.5

apps/minecraft/kustomization.yaml

@@ -18,7 +18,7 @@ images:
     newTag: java21
   - name: alpine
     newName: alpine
-    newTag: "3.22"
+    newTag: "3.23"
   - name: rsync
     newName: eeacms/rsync
     newTag: "3.0"

apps/ntfy/kustomization.yaml

@@ -13,4 +13,4 @@ resources:
 images:
   - name: binwiederhier/ntfy
     newName: binwiederhier/ntfy
-    newTag: v2.14.0
+    newTag: v2.15.0

apps/paperless/kustomization.yaml

@@ -14,14 +14,14 @@ namespace: paperless
 images:
   - name: paperless
     newName: ghcr.io/paperless-ngx/paperless-ngx
-    newTag: "2.19.4"
+    newTag: "2.20.2"
 
 
 helmCharts:
   - name: redis
     releaseName: redis
     repo: https://charts.bitnami.com/bitnami
-    version: 23.2.5
+    version: 24.0.8
     valuesInline:
       auth:
         enabled: false

apps/recipes/kustomization.yaml

@@ -13,5 +13,5 @@ resources:
 
 images:
   - name: mealie
-    newTag: v3.4.0
+    newTag: v3.7.0
     newName: ghcr.io/mealie-recipes/mealie

infrastructure/argocd/kustomization.yaml

@@ -4,7 +4,7 @@ kind: Kustomization
 namespace: argocd
 resources:
   - namespace.yaml
-  - https://github.com/argoproj/argo-cd//manifests/cluster-install?timeout=120&ref=v3.2.0
+  - https://github.com/argoproj/argo-cd//manifests/cluster-install?timeout=120&ref=v3.2.1
   - ingress.yaml
   - argo-apps.application.yaml
   - bootstrap-repo.sealedsecret.yaml

infrastructure/external-dns/kustomization.yaml

@@ -11,4 +11,4 @@ resources:
 images:
   - name: dns
     newName: git.kluster.moll.re/remoll/dns
-    newTag: 0.0.2-build.100
+    newTag: 0.0.2-build.124

infrastructure/metallb-system/kustomization.yaml

@@ -7,6 +7,6 @@ resources:
   # - namespace.yaml
   # namespace is already included in the remote kustomization
   # - github.com/metallb/metallb/config/native?ref=v0.15.2
-  - github.com/metallb/metallb/config/frr?ref=v0.15.2
+  - github.com/metallb/metallb/config/frr?ref=v0.15.3
   - ipaddresspool.yaml
 

infrastructure/monitoring/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: monitoring
 resources: 
   - namespace.yaml
   # prometheus-operator crds
-  - https://github.com/prometheus-operator/prometheus-operator?ref=v0.86.1
+  - https://github.com/prometheus-operator/prometheus-operator?ref=v0.87.1
   # single prometheus instance with a thanos sidecar
   - prometheus.yaml
   - thanos-store.statefulset.yaml
@@ -17,17 +17,17 @@ resources:
 images:
   - name: thanos
     newName: quay.io/thanos/thanos
-    newTag: v0.39.2
+    newTag: v0.40.1
 
 
 helmCharts:
   - name: loki
     releaseName: loki
     repo: https://grafana.github.io/helm-charts
-    version: 6.45.2
+    version: 6.49.0
     valuesFile: loki.values.yaml
   - name: prometheus-node-exporter
     releaseName: prometheus-node-exporter
     repo: https://prometheus-community.github.io/helm-charts
-    version: 4.49.1
+    version: 4.49.2
     valuesFile: prometheus-node-exporter.values.yaml

infrastructure/pg-ha/kustomization.yaml

@@ -9,6 +9,6 @@ namespace: pg-ha
 helmCharts:
   - name: cloudnative-pg
     releaseName: pg-controller
-    version: 0.26.1
+    version: 0.27.0
     valuesFile: values.yaml
     repo: https://cloudnative-pg.io/charts/

infrastructure/renovate/kustomization.yaml

@@ -11,4 +11,4 @@ resources:
 images:
   - name: renovate/renovate
     newName: renovate/renovate
-    newTag: "41"
+    newTag: "42"

infrastructure/sealedsecrets/kustomization.yaml

@@ -9,4 +9,4 @@ resources:
 images:
   - name: controller
     newName: docker.io/bitnami/sealed-secrets-controller
-    newTag: 0.32.2
+    newTag: 0.33.1

infrastructure/traefik-system/configmap.yaml

@@ -66,6 +66,11 @@ data:
         [entryPoints.websecure.forwardedHeaders]
           insecure = true
           # forward ip headers no matter where they come from
+        [entryPoints.websecure.transport.respondingTimeouts]
+          readTimeout  = "0"
+          # writeTimeout = "300s"
+          # idleTimeout  = "180s"
+
 
       [entryPoints.metrics]
         address = ":9100"

infrastructure/traefik-system/kustomization.yaml

@@ -13,6 +13,6 @@ namespace: traefik-system
 helmCharts:
   - name: traefik
     releaseName: traefik
-    version: 37.2.0
+    version: 37.4.0
     valuesFile: values.yaml
     repo: https://traefik.github.io/charts