31 changed files with 22 additions and 112 deletions
--- a/kustomize/bases/deployment/deployment.yaml
+++ b/kustomize/bases/deployment/deployment.yaml
@ -6,6 +6,6 @@ metadata:
 spec:
  replicas: 1
  strategy:
-    type: RollingUpdate
+    type: Recreate
  template:
    spec:
--- a/kustomize/bases/deployservice/deployment.yaml
+++ b/kustomize/bases/deployservice/deployment.yaml
@ -6,6 +6,6 @@ metadata:
 spec:
  replicas: 1
  strategy:
-    type: RollingUpdate
+    type: Recreate
  template:
    spec:
--- a/kustomize/bases/noservice/deployment.yaml
+++ b/kustomize/bases/noservice/deployment.yaml
@ -6,6 +6,6 @@ metadata:
 spec:
  replicas: 1
  strategy:
-    type: RollingUpdate
+    type: Recreate
  template:
    spec:
--- a/namespaces/ai/ollama/kustomization.yaml
+++ b/namespaces/ai/ollama/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: ollama/ollama
-    newTag: 0.21.0
-
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/ai/ollama/patches/deployment.yaml
+++ b/namespaces/ai/ollama/patches/deployment.yaml
@ -3,8 +3,6 @@ kind: Deployment
 metadata:
  name: app
 spec:
-  strategy:
-    type: Recreate # Needed since only 1 GPU
  template:
    spec:
      runtimeClassName: nvidia
@ -15,7 +13,7 @@ spec:
          effect: "NoSchedule"
      containers:
        - name: ollama
-          image: image
+          image: ollama/ollama:0.6.7
          imagePullPolicy: IfNotPresent
          resources:
            limits:
--- a/namespaces/ai/openwebui/extra/gatus-endpoints.yaml
+++ b/namespaces/ai/openwebui/extra/gatus-endpoints.yaml
@ -8,7 +8,7 @@ data:
  owui-internal-gatus-endpoints.yaml: |
    endpoints:
      - name: Open WebUI
-        url: http://open-webui-chart.ai.svc.cluster.local/
+        url: http://open-webui.ai.svc.cluster.local/
        group: Internal/AI
        interval: 5m 
        alerts:
--- a/namespaces/ai/openwebui/kustomization.yaml
+++ b/namespaces/ai/openwebui/kustomization.yaml
@ -91,7 +91,7 @@ replacements:
 labels:
  - includeSelectors: true
    pairs:
-      app.kubernetes.io/appName: open-webui-chart
+      app.kubernetes.io/appName: open-webui
  - pairs:
      app.kubernetes.io/appNamespace: ai
  - pairs:
--- a/namespaces/ai/openwebui/patches/chart.yaml
+++ b/namespaces/ai/openwebui/patches/chart.yaml
@ -20,7 +20,7 @@ spec:
      subPath: "data"
      storageClass: longhorn-private
    image:
-      tag: 0.6.15
+      tag: 0.6.10
    extraEnvVars:
      - name: ENABLE_OAUTH_SIGNUP
        value: "true"
--- a/namespaces/ai/tabby/config.toml
+++ b/namespaces/ai/tabby/config.toml
@ -1,13 +1,13 @@
 [model.completion.http]
 kind = "ollama/completion"
-model_name = "qwen3.5:9b"
+model_name = "qwen2.5-coder:14b-instruct-q4_K_M"
 api_endpoint = "http://ollama-svc:11434"
 # prompt_template = "<PRE> {prefix} <SUF>{suffix} <MID>"  # Example prompt template for the CodeLlama model series.

 # Chat model
 [model.chat.http]
 kind = "openai/chat"
-model_name = "qwen3.5:9b"
+model_name = "llama3.2:latest"
 api_endpoint = "http://ollama-svc:11434/v1"

 # Embedding model
--- a/namespaces/ai/tabby/kustomization.yaml
+++ b/namespaces/ai/tabby/kustomization.yaml
@ -1,10 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: tabbyml/tabby
-    newTag: "20260330"
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/ai/tabby/patches/deployment.yaml
+++ b/namespaces/ai/tabby/patches/deployment.yaml
@ -12,7 +12,7 @@ spec:
          effect: "NoSchedule"
      containers:
        - name: tabby
-          image: image
+          image: tabbyml/tabby:0.25.2
          imagePullPolicy: IfNotPresent
          ports:
            - name: tabby
--- a/namespaces/apps/comentario/kustomization.yaml
+++ b/namespaces/apps/comentario/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: registry.gitlab.com/comentario/comentario
-    newTag: v3.14.0
-
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/apps/comentario/patches/deployment.yaml
+++ b/namespaces/apps/comentario/patches/deployment.yaml
@ -21,7 +21,7 @@ spec:
                    values:
                      - "true"
      containers:
-        - image: image
+        - image: registry.gitlab.com/comentario/comentario:v3.13.1
          imagePullPolicy: IfNotPresent
          name: comentario
          ports:
--- a/namespaces/apps/linkwarden/kustomization.yaml
+++ b/namespaces/apps/linkwarden/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: ghcr.io/linkwarden/linkwarden
-    newTag: v2.14.0
-
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/apps/linkwarden/patches/deployment.yaml
+++ b/namespaces/apps/linkwarden/patches/deployment.yaml
@ -7,8 +7,7 @@ spec:
    spec:
      containers:
        - name: linkwarden
-          image: image
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/linkwarden/linkwarden:v2.9.1
          envFrom:
            - configMapRef:
                name: linkwarden-config
--- a/namespaces/apps/paperless/kustomization.yaml
+++ b/namespaces/apps/paperless/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: ghcr.io/paperless-ngx/paperless-ngx
-    newTag: 2.20.14
-
 transformers:
  - |-
    apiVersion: builtin
@ -111,7 +106,7 @@ configMapGenerator:
      - PAPERLESS_FILENAME_DATE_ORDER=MDY
      - PAPERLESS_FILENAME_FORMAT="{{created_year}}/{{created_month}}/{{created_day}}/{{title}}"
      - PAPERLESS_PORT="8000"
-      - PAPERLESS_BIND_ADDR="::"
+      - PAPERLESS_BIND_ADDR="[::]"
      - PAPERLESS_CONSUMER_POLLING="30"
      # Setup SMTP
      - PAPERLESS_EMAIL_HOST=blizzard.mxrouting.net
--- a/namespaces/apps/paperless/patches/deployment.yaml
+++ b/namespaces/apps/paperless/patches/deployment.yaml
@ -14,10 +14,10 @@ spec:
                  - key: kubernetes.io/hostname
                    operator: In
                    values:
-                      - blackstaff
+                      - arthur
      containers:
        - name: paperless
-          image: image
+          image: ghcr.io/paperless-ngx/paperless-ngx:2.14.7
          imagePullPolicy: IfNotPresent
          volumeMounts:
            - name: consume-volume
--- a/namespaces/apps/syncthing/patches/statefulset.yaml
+++ b/namespaces/apps/syncthing/patches/statefulset.yaml
@ -8,7 +8,7 @@ spec:
      restartPolicy: Always
      containers:
        - name: syncthing
-          image: syncthing/syncthing:2.0.10
+          image: syncthing/syncthing:1.29
          ports:
            - name: syncthing
              containerPort: 8384
--- a/namespaces/apps/vaultwarden/kustomization.yaml
+++ b/namespaces/apps/vaultwarden/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: vaultwarden/server
-    newTag: 1.35.7
-
 transformers:
  - |-
    apiVersion: builtin
@ -96,4 +91,3 @@ configMapGenerator:
      - SMTP_FROM_NAME="Vaultwarden"
      - SMTP_USERNAME=homelab
      - SMTP_HOST=blizzard.mxrouting.net
-      - REQUIRE_DEVICE_EMAIL=false
--- a/namespaces/apps/vaultwarden/patches/deployment.yaml
+++ b/namespaces/apps/vaultwarden/patches/deployment.yaml
@ -7,7 +7,7 @@ spec:
    spec:
      containers:
        - name: vaultwarden
-          image: image
+          image: vaultwarden/server:1.33.2
          imagePullPolicy: IfNotPresent
          envFrom:
            - configMapRef:
--- a/namespaces/auth/authentik/patches/chart.yaml
+++ b/namespaces/auth/authentik/patches/chart.yaml
@ -5,7 +5,7 @@ metadata:
 spec:
  chart: authentik
  repo: https://charts.goauthentik.io
-  version: 2026.2.2
+  version: 2025.6.1
  targetNamespace: auth
  createNamespace: true
  valuesContent: |-
--- a/namespaces/kube-system/kustomization.yaml
+++ b/namespaces/kube-system/kustomization.yaml
@ -1,14 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-configMapGenerator:
-  - name: coredns-custom
-    namespace: kube-system
-    options:
-      disableNameSuffixHash: true
-    literals:
-      - |
-        tailnet.server=leechpepin.tailnet:53 {
-            forward . 100.100.100.100
-            cache 30
-        }
--- a/namespaces/kustomization.yaml
+++ b/namespaces/kustomization.yaml
@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

 resources:
-  - kube-system
  - cert-manager/post-crd
  - ai/
  - apps/
--- a/namespaces/longhorn/longhorn/patches/chart.yaml
+++ b/namespaces/longhorn/longhorn/patches/chart.yaml
@ -8,7 +8,7 @@ metadata:
  generation: 1
  name: longhorn-install
 spec:
-  version: v1.10.2
+  version: v1.7.2
  chart: longhorn
  repo: https://charts.longhorn.io
  failurePolicy: abort
--- a/namespaces/monitoring/diun/kustomization.yaml
+++ b/namespaces/monitoring/diun/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: crazymax/diun
-    newTag: 4.31.0
-
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/monitoring/diun/patches/deployment.yaml
+++ b/namespaces/monitoring/diun/patches/deployment.yaml
@ -23,7 +23,7 @@ spec:
      serviceAccountName: diun
      containers:
        - name: diun
-          image: image
+          image: crazymax/diun:4.29.0
          imagePullPolicy: IfNotPresent
          args: ["serve"]
          envFrom:
--- a/namespaces/monitoring/gatus/kustomization.yaml
+++ b/namespaces/monitoring/gatus/kustomization.yaml
@ -1,10 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: twinproduction/gatus
-    newTag: v5.35.0
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/monitoring/gatus/patches/deployment.yaml
+++ b/namespaces/monitoring/gatus/patches/deployment.yaml
@ -23,12 +23,8 @@ spec:
                      - "true"
      containers:
        - name: gatus
-          image: image
+          image: twinproduction/gatus:v5.17.0
          imagePullPolicy: IfNotPresent
-          securityContext:
-            capabilities:
-              add:
-                - NET_RAW
          ports:
            - containerPort: 8080
              name: gatus
@ -72,12 +68,6 @@ spec:
                  name: gatus-secrets
                  key: POSTGRES_PASSWORD
                  optional: false
-            - name: NTFY_TOPIC
-              valueFrom:
-                secretKeyRef:
-                  name: gatus-secrets
-                  key: NTFY_TOPIC
-                  optional: false
          volumeMounts:
            - mountPath: /config/config.yaml
              name: gatus-config
--- a/namespaces/monitoring/umami/kustomization.yaml
+++ b/namespaces/monitoring/umami/kustomization.yaml
@ -1,11 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

-images:
-  - name: image
-    newName: ghcr.io/umami-software/umami
-    newTag: postgresql-v2.19.0
-
 transformers:
  - |-
    apiVersion: builtin
--- a/namespaces/monitoring/umami/patches/deployment.yaml
+++ b/namespaces/monitoring/umami/patches/deployment.yaml
@ -22,8 +22,7 @@ spec:
                      - "true"
      containers:
        - name: umami
-          image: image
-          imagePullPolicy: IfNotPresent
+          image: ghcr.io/umami-software/umami:postgresql-v2.17.0
          envFrom:
            - configMapRef:
                name: umami-config
--- a/restore/pgdump.yaml
+++ b/restore/pgdump.yaml
@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  name: pvc-inspector
-  namespace: core
-spec:
-  containers:
-    - name: inspector
-      image: busybox
-      command: ["sleep", "3600"]
-      volumeMounts:
-        - name: my-volume
-          mountPath: /data
-  volumes:
-    - name: my-volume
-      persistentVolumeClaim:
-        claimName: backup-pvc