Update renovate/renovate Docker tag to v41.30.3

cluster/apps/immich/immich-db.yml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: redis
-        image: docker.io/valkey/valkey:8-bookworm@sha256:facc1d2c3462975c34e10fccb167bfa92b0e0dbd992fc282c29a61c3243afb11
+        image: docker.io/valkey/valkey:8-bookworm@sha256:620286c7b6c9db39c9be8bae9cc1f187a47d4b52d1b513bdf5e0cc869e65d55d
         env:
         - name: REDIS_HOSTNAME
           value: "immich-redis"

cluster/apps/renovate/renovate-job.yml

@@ -15,7 +15,7 @@ spec:
         spec:
           hostNetwork: true
           containers:
-            - image: renovate/renovate:41.31.0
+            - image: renovate/renovate:41.30.3
               name: renovate-bot
               env:
                 - name: RENOVATE_TOKEN

cluster/apps/searxng/searxng.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:a8de13bc467fc7e8d9edf35f71e99dcbb4ead0c965f120f689ab8dffc2999ecc
+        image: searxng/searxng@sha256:8f757f615fe5dc634ba16fae8576a5189b695b55fc225f6bae2efb5b9aa8d3da
         ports:
         - containerPort: 8080
         env:

cluster/config/namespaces/namespaces.yml

@@ -13,11 +13,3 @@ metadata:
   name: cert-manager
   labels:
     name: cert-manager
-
----
-kind: Namespace
-apiVersion: v1
-metadata:
-  name: monitoring
-  labels:
-    name: monitoring

cluster/helm/prometheus/prometheus-release.yml

@@ -1,28 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: prometheus
-  namespace: monitoring
-spec:
-  interval: 24h
-  chart:
-    spec:
-      chart: prometheus
-      version: "27.23.0"
-      sourceRef:
-        kind: HelmRepository
-        name: prometheus-community
-        namespace: flux-system
-      interval: 24h
-  install:
-    remediation:
-      retries: 3
-  upgrade:
-    remediation:
-      retries: 3
-  values:
-    service:
-      enabled: true
-      type: LoadBalancer
-      servicePort: 9090

cluster/helm/prometheus/prometheus-repo.yml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: prometheus-community
-  namespace: flux-system
-spec:
-  interval: 24h
-  url: https://prometheus-community.github.io/helm-charts

cluster/helm/sealed-secrets/sealed-secrets-release.yaml

@@ -3,22 +3,26 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: sealed-secrets
-  namespace: kube-system
+  namespace: flux-system
 spec:
   chart:
     spec:
       chart: sealed-secrets
+      reconcileStrategy: ChartVersion
       sourceRef:
         kind: HelmRepository
         name: sealed-secrets
-        namespace: flux-system
       version: '>=1.15.0-0'
   install:
     crds: Create
   interval: 24h
-  releaseName: sealed-secrets-controller
+  releaseName: sealed-secrets
+  targetNamespace: flux-system
   upgrade:
     crds: CreateReplace
   values:
+    service:
+      type: LoadBalancer
+      nodePort: 30081
     networkPolicy:
       enabled: true