diff --git a/helmfile.d/01-infrastructure.lock b/helmfile.d/01-infrastructure.lock
index 9c518fd..bbf2a7e 100644
--- a/helmfile.d/01-infrastructure.lock
+++ b/helmfile.d/01-infrastructure.lock
@@ -2,10 +2,10 @@ version: 1.2.3
 dependencies:
   - name: ceph-csi-drivers
     repository: https://ceph.github.io/ceph-csi-operator
-    version: 1.0.4
+    version: 1.0.5
   - name: cert-manager
     repository: https://charts.jetstack.io
-    version: v1.21.1
+    version: v1.21.2
   - name: cert-manager-webhook-hetzner
     repository: https://charts.hetzner.cloud
     version: 0.9.0
@@ -20,6 +20,6 @@ dependencies:
     version: 1.102.3
   - name: traefik
     repository: https://traefik.github.io/charts
-    version: 41.4.0
-digest: sha256:9a48dc3d253544b5d277541027343b52c56cbf3db099aef6bc1024d26f772fb5
-generated: "2026-09-06T23:37:30.473721507-06:00"
+    version: 41.5.0
+digest: sha256:e1fec54455c3454c714a255a2527c5be252fa398b664692452cd47f823803b9c
+generated: "2026-09-14T17:19:31.671900496-06:00"
diff --git a/helmfile.d/02-datastore.lock b/helmfile.d/02-datastore.lock
index 0052951..896a707 100644
--- a/helmfile.d/02-datastore.lock
+++ b/helmfile.d/02-datastore.lock
@@ -5,12 +5,12 @@ dependencies:
     version: 4.10.0
   - name: mariadb
     repository: https://charts.bitnami.com/bitnami
-    version: 27.0.8
+    version: 27.3.0
   - name: pgo
     repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
     version: 5.8.1
   - name: postgrescluster
     repository: git+https://github.com/grantdhunter/postgres-operator@helm?ref=main
     version: 5.7.4
-digest: sha256:74646bdc311fe190243dce02744a8bbf795b9e2d312b0f6929d991ffc56b2f78
-generated: "2026-09-06T23:32:03.890300542-06:00"
+digest: sha256:0b7bc85461a8607ddce60952c15ec467bed71033befbb146f584e2d913288081
+generated: "2026-09-14T17:19:32.33665197-06:00"
diff --git a/helmfile.d/03-apps.lock b/helmfile.d/03-apps.lock
index 97d5bd1..9956bba 100644
--- a/helmfile.d/03-apps.lock
+++ b/helmfile.d/03-apps.lock
@@ -35,9 +35,9 @@ dependencies:
     version: 0.1.0
   - name: matrix-synapse
     repository: https://ananace.gitlab.io/charts
-    version: 3.12.36
+    version: 3.12.37
   - name: static-site
     repository: git+https://github.com/cfpb/static-site@charts?ref=main
     version: 0.1.1
-digest: sha256:212adcd81a2970bc9ecf12a1e9c200e62e8201f2e194ba563d1682967f1ed825
-generated: "2026-09-06T23:14:51.876622943-06:00"
+digest: sha256:71da637606209d74d9f88d2b9ae48aac03ae8d26a8b314a405726ad75d1d7269
+generated: "2026-09-14T17:19:37.700189741-06:00"
diff --git a/immich/values.yaml.gotmpl b/immich/values.yaml.gotmpl
index cc60252..0d5538f 100644
--- a/immich/values.yaml.gotmpl
+++ b/immich/values.yaml.gotmpl
@@ -3,7 +3,7 @@ controllers:
     containers:
       main:
         image:
-          tag: v3.1.0
+          tag: v3.2.1
 
         env:
           DB_HOSTNAME: {{ exec "kubectl" (list "-n" "immich" "get" "secrets" "postgres-pguser-immich" "-ogo-template='{{.data.host | base64decode }}'") }}
diff --git a/rook-ceph/values.yaml.gotmpl b/rook-ceph/values.yaml.gotmpl
index 0470b7e..e7a821e 100644
--- a/rook-ceph/values.yaml.gotmpl
+++ b/rook-ceph/values.yaml.gotmpl
@@ -1,7 +1,7 @@
 resources:
   requests:
     cpu: 100m
-    memory: 128Mi
+    memory: 512Mi
   limits:
     cpu: 1
-    memory: 300Mi
+    memory: 1Gi