Update .gitea/workflows/renovate.yml

Reviewed-on: #375

.drone.yml

@@ -1,17 +0,0 @@
----
-kind: pipeline
-type: kubernetes
-name: renovate
-
-steps:
-  - name: renovate
-    image: renovate/renovate:41.97.7
-    commands:
-      - unset GIT_COMMITTER_NAME GIT_COMMITTER_EMAIL GIT_AUTHOR_NAME GIT_AUTHOR_EMAIL
-      - renovate
-
-    environment:
-      RENOVATE_TOKEN:
-        from_secret: RENOVATE_TOKEN
-      GITHUB_COM_TOKEN:
-        from_secret: GITHUB_COM_TOKEN

.gitea/workflows/renovate.yml

@@ -0,0 +1,25 @@
+name: renovate
+
+on:
+  schedule:
+    - cron: "@daily"
+  workflow_dispatch:
+
+jobs:
+  renovate:
+    runs-on: ubuntu-latest
+    container:
+      image: renovate/renovate:41.97.7
+      options: |-
+        --network=bridge
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run Renovate
+        env:
+          RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}
+          GITHUB_COM_TOKEN: ${{ secrets.PAT_TOKEN }}
+        run: |
+          renovate

cluster/apps/bazarr/bazarr-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: bazarr-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/code-server/code-server-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: code-server-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/ersatztv/ersatztv-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ersatztv-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/ersatztv/ersatztv.yml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: ersatztv
-        image: jasongdove/ersatztv:v25.7.0
+        image: jasongdove/ersatztv:v25.7.1
         ports:
         - containerPort: 8409
         volumeMounts:

cluster/apps/ghostfolio/ghostfolio-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ghostfolio-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/ghostfolio/ghostfolio.yml

@@ -78,7 +78,7 @@ spec:
               key: postgres-password
       containers:
       - name: ghostfolio
-        image: docker.io/ghostfolio/ghostfolio:2.207.0
+        image: docker.io/ghostfolio/ghostfolio:2.208.0
         securityContext:
           capabilities:
             drop:

cluster/apps/gitea-act/gitea-act-pvc.yml

@@ -2,7 +2,7 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: gitea-act-runner-ceph
+  name: gitea-act-runner-longhorn
   namespace: default
 spec:
   accessModes:
@@ -11,4 +11,4 @@ spec:
   resources:
     requests:
       storage: 100Mi
-  storageClassName: csi-rbd-sc
+  storageClassName: longhorn

cluster/apps/gitea-act/gitea-act.yml

@@ -18,14 +18,14 @@ spec:
       labels:
         app: gitea-act-runner
     spec:
-      hostNetwork: true
       restartPolicy: Always
+      hostNetwork: true
       volumes:
       - name: docker-certs
         emptyDir: {}
       - name: runner-data
         persistentVolumeClaim:
-          claimName: gitea-act-runner-ceph
+          claimName: gitea-act-runner-longhorn
       initContainers:
       - name: wait-for-gitea
         image: busybox
@@ -52,7 +52,7 @@ spec:
         - name: GITEA_INSTANCE_URL
           value: "https://gitea.akshun-lab.cc"
         - name: GITEA_RUNNER_REGISTRATION_TOKEN
-          value: "NvAHP4f1in4Fpe6VFaiwiN98IR0poOQoDv4dDKcN"
+          value: "uxvKmGvtraocJMCcfJ101XC9kUoY8OlCEN18CvgZ"
         - name: CONFIG_FILE
           value: "/data/config.yaml"
         volumeMounts:
@@ -61,7 +61,7 @@ spec:
         - name: runner-data
           mountPath: /data
       - name: daemon
-        image: docker:28.4.0-dind
+        image: docker:28.5.1-dind
         env:
         - name: DOCKER_TLS_CERTDIR
           value: /certs
@@ -70,4 +70,3 @@ spec:
         volumeMounts:
         - name: docker-certs
           mountPath: /certs
- 

cluster/apps/gitea/gitea-pvc.yml

@@ -1,33 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: gitea-app-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: csi-rbd-sc
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: gitea-db-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/gotenberg/gotenberg.yml

@@ -16,7 +16,7 @@ spec:
         runAsUser: 1001
       containers:
       - name: gotenberg
-        image: gotenberg/gotenberg:8.23
+        image: gotenberg/gotenberg:8.24
         command:
         - sh
         - -c

cluster/apps/homepage/homepage-config.yml

@@ -52,7 +52,7 @@ data:
         useEqualHeights: true
         hideErrors: true
         statusStyle: "dot"
-        background: /images/background.png
+        background: /images/sur.png
     services.yaml: |
         - Apps:
               - Sonarr:
@@ -259,13 +259,6 @@ data:
                     namespace: default
                     podSelector: app=paperless-ngx
                     app: paperless-ngx
-              - Open-WebUI:
-                    icon: ollama.png
-                    description: ollama Frontend
-                    href: https://ollama.akshun-lab.cc
-                    namespace: default
-                    podSelector: app=open-webui
-                    app: open-webui
               - Ghostfolio:
                     icon: ghostfolio.png
                     description: portfolio analyzer
@@ -273,12 +266,6 @@ data:
                     namespace: default
                     podSelector: app=ghostfolio
                     app: ghostfolio
-              - Drone:
-                    icon: drone.png
-                    description: CI/CD
-                    namespace: default
-                    app: drone
-                    href: https://drone.akshun-lab.cc
               - Searxng:
                     icon: searxng.png
                     description: search engine

cluster/apps/homepage/homepage-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: homepage-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 100Mi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/immich/immich-ml.yml

@@ -16,10 +16,9 @@ spec:
       labels:
         app: immich-ml
     spec:
-      runtimeClassName: nvidia
       containers:
       - name: immich-machine-learning
-        image: ghcr.io/immich-app/immich-machine-learning:v2.0.1-cuda
+        image: ghcr.io/immich-app/immich-machine-learning:v2.0.1-openvino
         ports:
         - containerPort: 3003
         env:
@@ -34,9 +33,9 @@ spec:
           mountPath: /cache
         resources:
           requests:
-            nvidia.com/gpu: "1"
+            gpu.intel.com/i915: "1"
           limits:
-            nvidia.com/gpu: "1"
+            gpu.intel.com/i915: "1"
       volumes:
       - name: model-cache
         persistentVolumeClaim:

cluster/apps/immich/immich-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: immich-cache-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 10Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/invidious/invidious-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: invidious-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/invidious/invidious.yml

@@ -66,7 +66,7 @@ spec:
         - name: postgres-data
           mountPath: /var/lib/postgresql/data
       - name: inv-companion
-        image: quay.io/invidious/invidious-companion@sha256:62e5ec92802bc6da3e7ca6f39879d869e20d065c5c6d9cfa8ec2296057c48a3d
+        image: quay.io/invidious/invidious-companion@sha256:a96f7a1eb88bf0d5882d519c9410f8c7b2d391cafc378b72f3bfd37dd5f0e587
         restartPolicy: Always
         env:
         - name: SERVER_SECRET_KEY

cluster/apps/jellyfin/jellyfin-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyfin-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 20Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/jellyseerr/jellyseerr-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyseerr-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/jellystat/jellystat-pvc.yml

@@ -1,33 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellystat-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellystat-backups
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/paperless-ngx/paperless-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: paperless-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/pihole/pihole-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pihole-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/prowlarr/prowlarr-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: prowlarr-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/pulse/pulse-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: pulse-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 100Mi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/pulse/pulse.yml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: pulse
-        image: rcourtman/pulse:4.21.0
+        image: rcourtman/pulse:4.23.0
         volumeMounts:
         - name: pulse-data
           mountPath: /data

cluster/apps/qbittorrent/qbittorrent-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: qbittorrent-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/radarr/radarr-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: radarr-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/searxng/searxng-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: searxng-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 100Mi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/searxng/searxng.yml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:106c4d4a741213e2f7550a074e4554df1ad9678ea6014b47911a5416a0636a6a
+        image: searxng/searxng@sha256:0e0493d1bff9ed55f774709c9113185aa3da0db3aea84bf86b356e97a21d54c6
         ports:
         - containerPort: 8080
         env:

cluster/apps/semaphore/semaphore-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: semaphore-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/semaphore/semaphore.yml

@@ -40,7 +40,7 @@ spec:
           subPath: db
       containers:
       - name: semaphore
-        image: public.ecr.aws/semaphore/pro/server:v2.16.31
+        image: public.ecr.aws/semaphore/pro/server:v2.16.34
         ports:
         - containerPort: 3000
         envFrom:

cluster/apps/sonarr/sonarr-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: sonarr-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/speedtest/speedtest-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: speedtest-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 100Mi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/apps/vaultwarden/vaultwarden-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: vaultwarden-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

cluster/config/namespaces/namespaces.yml

@@ -22,14 +22,6 @@ metadata:
   labels:
     name: monitoring
 
----
-kind: Namespace
-apiVersion: v1
-metadata:
-  name: ceph
-  labels:
-    name: ceph
-
 ---
 kind: Namespace
 apiVersion: v1

cluster/helm/cert-manager/cert-manager-release.yml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: "v1.18.2"
+      version: "v1.19.0"
       sourceRef:
         kind: HelmRepository
         name: jetstack

cluster/helm/csi-driver-smb/csi-driver-smb-release.yml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: csi-driver-smb
-      version: "1.18.0"
+      version: "1.19.1"
       sourceRef:
         kind: HelmRepository
         name: csi-driver-smb

cluster/helm/longhorn/longhorn-release.yml

@@ -28,4 +28,4 @@ spec:
       enabled: false
     service:
       ui:
-        type: LoadBalancer
+        type: ClusterIP

cluster/helm/prometheus/prometheus-release.yml

@@ -9,7 +9,7 @@ spec:
   chart:
     spec:
       chart: prometheus
-      version: "27.35.0"
+      version: "27.40.1"
       sourceRef:
         kind: HelmRepository
         name: prometheus-community

disabled/apps/drone/drone-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: drone-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 1Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

disabled/apps/open-webui/open-webui-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: open-webui-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

disabled/apps/open-webui/open-webui.yml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: open-webui
-        image: ghcr.io/open-webui/open-webui:0.6.32
+        image: ghcr.io/open-webui/open-webui:0.6.33
         ports:
         - containerPort: 8080
         env:

disabled/helm/ollama/ollama-pvc.yml

@@ -1,18 +1,3 @@
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ollama-ceph
-  namespace: default
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 20Gi
-  storageClassName: csi-rbd-sc
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim