Update ghcr.io/flaresolverr/flaresolverr Docker tag to v3.3.25

Reviewed-on: https://gitea.akshun-lab.uk/akshun/public-k3s/pulls/134

.gitea/workflows/renovate.yml

@@ -13,7 +13,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run Renovate
-        uses: docker://renovate/renovate:41.43.0
+        uses: docker://renovate/renovate:41.46.3
         env:
           LOG_LEVEL: info
           RENOVATE_TOKEN: ${{ secrets.RENOVATE_TOKEN }}

cluster/apps/flaresolverr/flaresolverr.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: flaresolverr
-        image: ghcr.io/flaresolverr/flaresolverr:v3.3.24
+        image: ghcr.io/flaresolverr/flaresolverr:v3.3.25
         ports:
         - containerPort: 8191
         env:

cluster/apps/ghostfolio/ghostfolio.yml

@@ -76,7 +76,7 @@ spec:
               key: postgres-password
       containers:
       - name: ghostfolio
-        image: docker.io/ghostfolio/ghostfolio:2.185.0
+        image: docker.io/ghostfolio/ghostfolio:2.186.0
         securityContext:
           capabilities:
             drop:

cluster/apps/gitea-act/gitea-act.yml

@@ -60,7 +60,7 @@ spec:
         - name: runner-data
           mountPath: /data
       - name: daemon
-        image: docker:28.3.2-dind
+        image: docker:28.3.3-dind
         env:
         - name: DOCKER_TLS_CERTDIR
           value: /certs

cluster/apps/immich/immich-pvc.yml

@@ -37,28 +37,21 @@ spec:
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  annotations:
-    pv.kubernetes.io/provisioned-by: smb.csi.k8s.io
   name: immich-pictures-pv
   namespace: default
 spec:
   capacity:
-    storage: 100Gi
+    storage: 20Gi
+  volumeMode: Filesystem
   accessModes:
     - ReadWriteMany
   persistentVolumeReclaimPolicy: Retain
-  storageClassName: immich-pictures-pv
   mountOptions:
-    - dir_mode=0777
-    - file_mode=0777
-  csi:
-    driver: smb.csi.k8s.io
-    volumeHandle: 10.0.0.123#pictures#immich
-    volumeAttributes:
-      source: //10.0.0.123/pictures
-    nodeStageSecretRef:
-      name: smb-creds
-      namespace: default
+    - hard
+    - nfsvers=4.1
+  nfs:
+    path: /k3s/pictures/
+    server: 10.0.0.123
 
 ---
 apiVersion: v1
@@ -67,9 +60,10 @@ metadata:
   name: immich-pictures-pvc
   namespace: default
 spec:
-  storageClassName: immich-pictures-pv
   accessModes:
     - ReadWriteMany
+  storageClassName: ""
+  volumeName: immich-pictures-pv
   resources:
     requests:
-      storage: 10Gi
+      storage: 20Gi

cluster/apps/searxng/searxng.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: searxng
-        image: searxng/searxng@sha256:d9078a33f77ef10daa381de557bb1d43703dbc7bace93bc7a4d4a9db80c9dee5
+        image: searxng/searxng@sha256:8ee06648ea025780c4805cf58fd66e48245bf7e81466751afae4bf84e5ef29ca
         ports:
         - containerPort: 8080
         env:

cluster/apps/vaultwarden/vaultwarden.yml

@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
       - name: vaultwarden
-        image: vaultwarden/server:1.34.2
+        image: vaultwarden/server:1.34.3
         ports:
         - containerPort: 80
         env:

cluster/helm/csi-driver-smb/csi-driver-smb-release.yml

@@ -20,3 +20,6 @@ spec:
   upgrade:
     remediation:
       remediateLastFailure: true
+  values:
+    linux:
+      kubelet: /var/lib/kubelet