Update renovate/renovate Docker tag to v41

Reviewed-on: https://gitea.akshun-lab.uk/akshun/public-k3s/pulls/45

.drone.yml

@@ -13,13 +13,13 @@ environment:
 
 steps:
   - name: renovate - validate config
-    image: renovate/renovate:41.12.0
+    image: renovate/renovate:41.13.0
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate-config-validator
 
   - name: renovate
-    image: renovate/renovate:41.12.0
+    image: renovate/renovate:41.13.0
     commands:
       - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
       - renovate

cluster/apps/code-server/code-server.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: code-server
-        image: lscr.io/linuxserver/code-server:4.101.1
+        image: lscr.io/linuxserver/code-server:4.101.2
         ports:
         - containerPort: 8443
         env:

cluster/apps/gluetun/gluetun-configmap.yml

@@ -8,7 +8,5 @@ data:
   VPN_SERVICE_PROVIDER: "surfshark"
   SERVER_COUNTRIES: "Netherlands"
   HTTPPROXY: "ON"
-  FIREWALL_INPUT_PORTS: "8080,7878,8989,8191,5055,6881"
-  FIREWALL_VPN_INPUT_PORTS: "8080,7878,8989,8191,5055,6881"
   FIREWALL_OUTBOUND_SUBNETS: "192.168.1.0/24,10.42.0.0/16,10.43.0.0/16"
   DNS_ADDRESS: "8.8.8.8"

cluster/apps/prowlarr/prowlarr.yml

@@ -14,6 +14,28 @@ spec:
       labels:
         app: prowlarr
     spec:
+      initContainers:
+      - name: gluetun
+        image: qmcgaw/gluetun:v3.40.0
+        restartPolicy: Always
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+        envFrom:
+        - configMapRef:
+            name: gluetun-config
+        env:
+        - name: OPENVPN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_PASSWORD
+        - name: OPENVPN_USER
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_USER
       containers:
       - name: prowlarr
         image: lscr.io/linuxserver/prowlarr:1.37.0

cluster/apps/qbittorrent/qbittorrent.yml

@@ -14,9 +14,31 @@ spec:
       labels:
         app: qbittorrent
     spec:
+      initContainers:
+      - name: gluetun
+        image: qmcgaw/gluetun:v3.40.0
+        restartPolicy: Always
+        securityContext:
+          capabilities:
+            add:
+            - NET_ADMIN
+        envFrom:
+        - configMapRef:
+            name: gluetun-config
+        env:
+        - name: OPENVPN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_PASSWORD
+        - name: OPENVPN_USER
+          valueFrom:
+            secretKeyRef:
+              name: openvpn-secrets
+              key: OPENVPN_USER
       containers:
       - name: qbittorrent
-        image: linuxserver/qbittorrent:5.1.0
+        image: linuxserver/qbittorrent:5.1.1
         ports:
         - containerPort: 8080
         env:

cluster/apps/searxng/searxng.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:bf3d26ca633a7cbc363d6eacf0c5fe0b346ade1af386882dc836e55a263e7ee3
+        image: searxng/searxng@sha256:2ae57bba39cab585f5c7a1223dd51eb6494fa6febd67b871d4bddf52fce08f16
         ports:
         - containerPort: 8080
         env:

cluster/apps/semaphore/semaphore.yml

@@ -37,7 +37,7 @@ spec:
           mountPath: /var/lib/mysql
       containers:
       - name: semaphore
-        image: public.ecr.aws/semaphore/pro/server:v2.15.1
+        image: public.ecr.aws/semaphore/pro/server:v2.15.2
         ports:
         - containerPort: 3000
         envFrom:

cluster/helm/rancher/rancher-release.yml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: rancher
-      version: "2.11.2"
+      version: "2.11.3"
       sourceRef:
         kind: HelmRepository
         name: rancher-stable