bump versions

helmfile.d/01-infrastructure.lock

@@ -1,11 +1,11 @@
-version: 0.170.1
+version: 1.2.3
 dependencies:
   - name: cert-manager
     repository: https://charts.jetstack.io
     version: v1.19.2
   - name: cert-manager-webhook-hetzner
     repository: https://vadimkim.github.io/cert-manager-webhook-hetzner
-  version: 1.4.0
+    version: 1.4.2
   - name: rook-ceph
     repository: https://charts.rook.io/release
     version: v1.18.8
@@ -14,9 +14,9 @@ dependencies:
     version: v1.18.8
   - name: tailscale-operator
     repository: https://pkgs.tailscale.com/helmcharts
-  version: 1.90.9
+    version: 1.92.4
   - name: traefik
     repository: https://traefik.github.io/charts
-  version: 37.4.0
+    version: 38.0.1
-digest: sha256:23d6b70fcb5e17bfa1e8fdc576a8057128b3bec68020fa8275a553b5caa23e99
+digest: sha256:3297bc0c10765abe170881882f7daf441a4dd735ed0ee7d1f4233692e8888c3c
-generated: "2025-12-14T14:13:45.546956484-07:00"
+generated: "2025-12-23T10:31:34.409765694-07:00"

helmfile.d/01-infrastructure.yaml

@@ -10,6 +10,7 @@ repositories:
   - name: cert-manager-webhook-hetzner
     url: https://vadimkim.github.io/cert-manager-webhook-hetzner
 
+lockFilePath: ./helmfile.d/01-infrastructure.lock
 releases:
   # networking
   - name: metallb

helmfile.d/02-datastore.lock

@@ -1,4 +1,4 @@
-version: 0.170.1
+version: 1.2.3
 dependencies:
   - name: k8up
     repository: https://k8up-io.github.io/k8up

helmfile.d/02-datastore.yaml

@@ -6,6 +6,7 @@ repositories:
   - name: k8up-io
     url: https://k8up-io.github.io/k8up
 
+lockFilePath: ./helmfile.d/02-datastore.lock
 releases:
   # data storage
   - name: pgo

helmfile.d/03-apps.lock

@@ -1,4 +1,4 @@
-version: 0.170.1
+version: 1.2.3
 dependencies:
   - name: ghost
     repository: https://charts.bitnami.com/bitnami
@@ -6,6 +6,9 @@ dependencies:
   - name: ghost
     repository: https://charts.bitnami.com/bitnami
     version: 25.0.4
+  - name: gitea
+    repository: https://dl.gitea.io/charts
+    version: 12.4.0
   - name: immich
     repository: https://immich-app.github.io/immich-charts
     version: 0.10.3
@@ -30,5 +33,5 @@ dependencies:
   - name: static-site
     repository: git+https://github.com/cfpb/static-site@charts?ref=main
     version: 0.1.1
-digest: sha256:e957d861b7351e1e89af29b29e8de19621c9069131669d32217276e8118e634b
+digest: sha256:b44d082b71203ca6bb4fd881d8c6ce71575db556f432bbcc46078a535c8cd9c3
-generated: "2025-12-14T14:14:24.483935436-07:00"
+generated: "2025-12-23T10:31:37.404126839-07:00"

helmfile.d/03-apps.yaml

@@ -12,6 +12,7 @@ repositories:
   - name: incngrnt
     url: git+https://git.incngrnt.ca/grant/charts@charts?ref=main
 
+lockFilePath: ./helmfile.d/03-apps.lock
 releases:
   # goatchat matrix
   - name: goatchat

immich/values.yaml.gotmpl

@@ -3,7 +3,7 @@ controllers:
     containers:
       main:
         image:
-          tag: v2.3.1
+          tag: v2.4.1
 
         env:
           DB_HOSTNAME: {{ exec "kubectl" (list "-n" "immich" "get" "secrets" "postgres-pguser-immich" "-ogo-template='{{.data.host | base64decode }}'") }}
@@ -44,7 +44,7 @@ server:
               memory: 256Mi
             limits:
               cpu: 1
-              memory: 512Mi
+              memory: 700Mi
   ingress:
     main:
       enabled: true
@@ -71,6 +71,6 @@ machine-learning:
               memory: 128Mi
             limits:
               cpu: 1
-              memory: 384Mi
+              memory: 1Gi