Update ghcr.io/flaresolverr/flaresolverr Docker tag to v3.3.25

.gitea/workflows/renovate.yml

@@ -13,7 +13,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run Renovate
-        uses: docker://renovate/renovate:41.46.3
+        uses: docker://renovate/renovate:41.43.0
         env:
           LOG_LEVEL: info
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}

cluster/apps/ghostfolio/ghostfolio.yml

@@ -76,7 +76,7 @@ spec:
               key: postgres-password
       containers:
       - name: ghostfolio
-        image: docker.io/ghostfolio/ghostfolio:2.186.0
+        image: docker.io/ghostfolio/ghostfolio:2.185.0
         securityContext:
           capabilities:
             drop:

cluster/apps/gitea-act/gitea-act.yml

@@ -60,7 +60,7 @@ spec:
         - name: runner-data
           mountPath: /data
       - name: daemon
-        image: docker:28.3.3-dind
+        image: docker:28.3.2-dind
         env:
         - name: DOCKER_TLS_CERTDIR
           value: /certs

cluster/apps/immich/immich-pvc.yml

@@ -37,21 +37,28 @@ spec:
 apiVersion: v1
 kind: PersistentVolume
 metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
   name: immich-pictures-pv
   namespace: default
 spec:
   capacity:
-    storage: 20Gi
-  volumeMode: Filesystem
+    storage: 100Gi
   accessModes:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
+  storageClassName: immich-pictures-pv
   mountOptions:
-    - hard
-    - nfsvers=4.1
-  nfs:
-    path: /k3s/pictures/
-    server: 10.0.0.123
+    - dir_mode=0777
+    - file_mode=0777
+  csi:
+    driver: smb.csi.k8s.io
+    volumeHandle: 10.0.0.123#pictures#immich
+    volumeAttributes:
+      source: //10.0.0.123/pictures
+    nodeStageSecretRef:
+      name: smb-creds
+      namespace: default
 
 ---
 apiVersion: v1
@@ -60,10 +67,9 @@ metadata:
   name: immich-pictures-pvc
   namespace: default
 spec:
+  storageClassName: immich-pictures-pv
   accessModes:
     - ReadWriteMany
-  storageClassName: ""
-  volumeName: immich-pictures-pv
   resources:
     requests:
-      storage: 20Gi
+      storage: 10Gi

cluster/apps/searxng/searxng.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:8ee06648ea025780c4805cf58fd66e48245bf7e81466751afae4bf84e5ef29ca
+        image: searxng/searxng@sha256:d9078a33f77ef10daa381de557bb1d43703dbc7bace93bc7a4d4a9db80c9dee5
         ports:
         - containerPort: 8080
         env:

cluster/apps/vaultwarden/vaultwarden.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.34.3
+        image: vaultwarden/server:1.34.2
         ports:
         - containerPort: 80
         env:

cluster/helm/csi-driver-smb/csi-driver-smb-release.yml

@@ -20,6 +20,3 @@ spec:
   upgrade:
     remediation:
       remediateLastFailure: true
-  values:
-    linux:
-      kubelet: /var/lib/kubelet