chore(deps): update container image tccr.io/truecharts/adminer to latest (#12775)

**Description**

Update of the original @kqmaverick guide from @depasseg (see ->
https://github.com/truecharts/website/pull/286), so I'll have them both
review here since filing on the Website one gets overwritten by here

⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: StevenMcElligott <89483932+StevenMcElligott@users.noreply.github.com>
Co-authored-by: kqmaverick <121722567+kqmaverick@users.noreply.github.com>

.all-contributorsrc

@@ -1937,6 +1937,51 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "K1Hyve",
+      "name": "Keyvan",
+      "avatar_url": "https://avatars.githubusercontent.com/u/53298451?v=4",
+      "profile": "https://github.com/K1Hyve",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "MickaelFontes",
+      "name": "MickaelFontes",
+      "avatar_url": "https://avatars.githubusercontent.com/u/81414455?v=4",
+      "profile": "https://github.com/MickaelFontes",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "blastik",
+      "name": "David CM",
+      "avatar_url": "https://avatars.githubusercontent.com/u/3662083?v=4",
+      "profile": "https://github.com/blastik",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-207-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-212-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -402,6 +402,13 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/cedstrom"><img src="https://avatars.githubusercontent.com/u/6175957?v=4?s=100" width="100px;" alt="cedstrom"/><br /><sub><b>cedstrom</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=cedstrom" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/v3DJG6GL"><img src="https://avatars.githubusercontent.com/u/72495210?v=4?s=100" width="100px;" alt="v3DJG6GL"/><br /><sub><b>v3DJG6GL</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Av3DJG6GL" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/polarstack"><img src="https://avatars.githubusercontent.com/u/42521003?v=4?s=100" width="100px;" alt="polarstack"/><br /><sub><b>polarstack</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=polarstack" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/K1Hyve"><img src="https://avatars.githubusercontent.com/u/53298451?v=4?s=100" width="100px;" alt="Keyvan"/><br /><sub><b>Keyvan</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=K1Hyve" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
     </tr>
   </tbody>
 </table>

.github/ct-install.yaml

@@ -12,21 +12,23 @@ chart-dirs:
 excluded-charts:
   - charts/dependency/subchart
   - charts/incubator/twingate-connector
+  - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
-  - charts/incubator/tauticord
   - charts/library/common
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
   - charts/stable/amcrest2mqtt
+  - charts/stable/tauticord
   - charts/stable/discordgsm
   - charts/stable/facebox
   - charts/stable/foundryvtt
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

.github/scripts/updateTraefikMiddlewareVersions.sh

@@ -1,53 +0,0 @@
-#! /bin/bash
-
-trainsPath="./charts"
-traefikTrain="enterprise"
-
-get_latest_release() {
-    # Get latest release from GitHub api, NOTE: Remove the header when running locally (or add a valid token)
-    curl --silent \
-         --header 'authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' \
-         --url "https://api.github.com/repos/$1/releases/latest" |
-    # Get tag line
-    grep '"tag_name":' |
-    # Pluck JSON value
-    sed -E 's/.*"([^"]+)".*/\1/'
-}
-
-set_key_to_version() {
-    key="$1"
-    version="$2"
-    traefikValuesFile="$trainsPath/$traefikTrain/traefik/values.yaml"
-    echo "Setting $key to $version..."
-    sed -i "s/${key}: .*/${key}: ${version}/" $traefikValuesFile
-
-    content=$(grep "$key:" "$traefikValuesFile" | sed "s/\s*${key}:\s*//" )
-    echo "New content of $key in values.yaml: $content"
-    echo ""
-}
-
-update_plugin() {
-    repo="$1"
-    key="$2"
-    pluginName="$3"
-
-    version=$(get_latest_release "$repo")
-    if [ -z "$version" ]
-    then
-        echo "Got empty version, skipping..."
-    else
-        echo "Fetched $pluginName plugin version: $version"
-        set_key_to_version "$key" "$version"
-    fi;
-}
-# Example
-# update_plugin "repo" "key_holding_version_in_values.yaml" "plugin_name_used_for_verbose_printing_only"
-
-# Real IP
-update_plugin "soulbalz/traefik-real-ip" "realIPVersion" "RealIP"
-
-# Theme Park
-update_plugin "packruler/traefik-themepark" "themeParkVersion" "ThemePark"
-
-# GeoBlock
-update_plugin "PascalMinder/geoblock" "geoBlockVersion" "GeoBlock"

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -240,7 +240,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -185,7 +185,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -247,7 +247,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -309,7 +309,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -371,7 +371,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -432,7 +432,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,12 +377,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
-      - uses: actions/setup-node@bea5baf987ba7aa777a8a0b4ace377a21c45c381 # v3
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
         with:
           node-version: 18
 

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -14,12 +14,12 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@23a02fe7be9e93f857a953cc8162e57d2c8401ef # v39.0.1
+        uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.7.4.5"
+appVersion: "23.8.2.7"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 7.0.3
+version: 7.0.7
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.7.4.5@sha256:2d52dece52908fc10565db7a5e8580606b4775ff164fb4bd0778f873cac58c5e
+  tag: v23.8.2.7@sha256:59d8931ff246dfe2740cfb53ae5db62242b05b1bd9f8dffac3dbbb634109fe0a
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.9.2"
+appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.5
+version: 3.0.17
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.9.2@sha256:eb75397391d6eed8eee85da22a9cf595c4e3d9a52fdfc311f8cb629baf1f543b
+  tag: v2.10.0@sha256:4df0da14f79e4308606b551f91bf6611b4207229344c3165684fbaccd6e2c475
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "11.0.2"
+appVersion: "11.0.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.6
+version: 9.0.20
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.2@sha256:b120463f63461cef87eaff1312378e6b99eb4a006176cf1707fc1590602dfb14
+  tag: v11.0.3@sha256:8fc31764c9cbc950025f4fd12df80a9d9afd23544988a63288988d211e89744b
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.21"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.7
+version: 8.0.21
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:fc655c32727d371ba77d370203f2622dde3e90b23a69214ca2cdcb6156eaa376
+  tag: v1.6.21@sha256:4c093f754425d49af43bdf72651300a37a76308ff342bd5836d38c2714f060b9
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.8"
+appVersion: "6.0.10"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.3
+version: 8.0.16
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.8@sha256:031136aedbbac60815dba3e87f4e270afb76fe3ab824946d57d4f9ba6bd6476f
+  tag: v6.0.10@sha256:ae08c7ae9b5a573d480d5108823bfe36cb6806b4a5755eb1e90bb00d7a4aa1bf
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.5
+version: 3.0.19
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:3d253e6a23403d74d9280d6bb964735b83a117edce2cc06c38f43ca96c9eb78d
+  tag: v1.6.1@sha256:932954e9fabea922ac0a443b174a6a7de41451304b97cf0bcad7f70d6d44c807
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.0.12"
+appVersion: "7.2.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.7
+version: 8.0.23
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.0.12@sha256:186cc9418acb87e02a24566a0abceb7c7be55912ff20d12cd226d438de479b1d
+  tag: v7.2.1@sha256:367fe40481435c422d6876053917e22069089d0c93ef0246298880526b748c04
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.3.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.7
+version: 6.0.21
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:0116bf9df507776691e51d4968ab61403d932cd5ca58a61505709e4988d1bee6
+  tag: v9.3.0@sha256:c7339d241f5c4f674a775ef8f2501b49d757bb969754cde24bf2b9109ce29b19
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -35,7 +35,7 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 18.0.0
+version: 18.1.0
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/questions.yaml

@@ -98,6 +98,95 @@ questions:
           schema:
             type: int
             default: 1
+  - variable: password_policy
+    group: "App Configuration"
+    label: "Password Policy Configuration"
+    description: "Authelia allows administrators to configure an enforced password policy."
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: enabled
+          label: "Enable"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: standard
+                label: Standard
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: min_length
+                      label: "Minimum Password Length"
+                      description: "Minimum Password Length"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 8
+                    - variable: max_length
+                      label: "Max Passsword Length"
+                      description: "Max Password Length"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 0
+                    - variable: require_uppercase
+                      label: "Require Upppercase"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_lowercase
+                      label: "Require Lowercase"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_number
+                      label: "Require Numbers"
+                      description: "Require Numbers in the password"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_special
+                      label: "Require Special Characters"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+              - variable: zxcvbn
+                label: zxcvbn
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: false
+                        required: true
+                    - variable: min_score
+                      label: "Min Score"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 3
   - variable: duo_api
     group: "App Configuration"
     label: "DUO API Configuration"

charts/enterprise/authelia/templates/_configmap.tpl

@@ -62,6 +62,20 @@ data:
       issuer: {{ .Values.totp.issuer | default .Values.domain }}
       period: {{ .Values.totp.period | default 30 }}
       skew: {{ .Values.totp.skew | default 1 }}
+    {{- if .Values.password_policy.enabled }}
+    password_policy:
+      standard:
+        enabled: {{ .Values.password_policy.standard.enabled | default false }}
+        min_length: {{ .Values.password_policy.standard.min_length | default 8 }}
+        max_length: {{ .Values.password_policy.standard.max_length | default 0 }}
+        require_uppercase: {{ .Values.password_policy.standard.require_uppercase | default false }}
+        require_lowercase: {{ .Values.password_policy.standard.require_lowercase | default false }}
+        require_number: {{ .Values.password_policy.standard.require_number | default false }}
+        require_special: {{ .Values.password_policy.standard.require_special | default false }}
+      zxcvbn:
+        enabled: {{ .Values.password_policy.zxcvbn.enabled | default false }}
+        min_score: {{ .Values.password_policy.zxcvbn.min_score | default 3 }}
+    {{- end -}}
     {{- if .Values.duo_api.enabled }}
     duo_api:
       hostname: {{ .Values.duo_api.hostname }}

charts/enterprise/authelia/values.yaml

@@ -117,6 +117,25 @@ totp:
   ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
   skew: 1
 
+##
+## Password Policy Config
+##
+## Parameters used for Password Policies
+password_policy:
+  ## See: https://www.authelia.com/configuration/security/password-policy/
+  standard:
+    enabled: false
+    min_length: 8
+    max_length: 0
+    require_uppercase: false
+    require_lowercase: false
+    require_number: false
+    require_special: false
+  zxcvbn:
+    ## See https://www.authelia.com/configuration/security/password-policy/#zxcvbn for more info
+    enabled: false
+    min_score: 3
+
 ##
 ## Duo Push API Configuration
 ##

charts/enterprise/blocky/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 8.0.0
+version: 8.0.1
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,18 +1,35 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.  Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default.  They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS.  You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
 - DoH - DNS over HTTPS
 
-While UDP provides no security for DNS both DoT and DoH will encrypt DNS request. DoH has the added benefit of privacy since DNS traffic will appear as HTTPS traffic.
+While UDP provides no security for DNS both DoT and DoH will encrypt DNS request. DoH has the added benefit of privacy since DNS traffic will appear as HTTPS traffic.  
 
 ### UDP DNS Setup
 
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you 
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above.  This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.0.3"
+appVersion: "10.1.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.6
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.4
+version: 9.0.18
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.0.3@sha256:2e59eea99682231d1766062f50b8e4da0b04f2620126befc836e7297de863af6
+  tag: v10.1.2@sha256:32fd9faad9b33eb189d403277720417fb83ccd90c65c004417e8baaa817db306
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/prometheus/Chart.yaml

@@ -29,7 +29,7 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 12.1.0
+version: 12.1.2
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/prometheus/questions.yaml

@@ -101,23 +101,24 @@ questions:
                               default: ""
                           - variable: basicAuth
                             label: Basic Auth
-                            type: dict
                             description: Basic authentication for remote write
-                            attrs:
-                              - variable: username
-                                label: Username
-                                description: Basic auth username
-                                schema:
-                                  type: string
-                                  required: true
-                                  default: ""
-                              - variable: password
-                                label: Password
-                                description: Basic auth password
-                                schema:
-                                  type: string
-                                  required: false
-                                  default: ""
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: username
+                                  label: Username
+                                  description: Basic auth username
+                                  schema:
+                                    type: string
+                                    required: true
+                                    default: ""
+                                - variable: password
+                                  label: Password
+                                  description: Basic auth password
+                                  schema:
+                                    type: string
+                                    required: false
+                                    default: ""
 
   - variable: exporters
     group: "App Configuration"

charts/enterprise/prometheus/templates/prometheus/_prometheus.tpl

@@ -126,8 +126,9 @@ spec:
   {{- if .Values.prometheus.remoteRead }}
   remoteRead: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteRead "context" $) | nindent 4 }}
   {{- end }}
-  {{- if .Values.prometheus.remoteWrite }}
-  remoteWrite: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteWrite "context" $) | nindent 4 }}
+  {{- with .Values.prometheus.remoteWrite }}
+  remoteWrite:
+    {{- tpl (toYaml .) $ | nindent 4 }}
   {{- end }}
   {{- if .Values.prometheus.podSecurityContext.enabled }}
   securityContext: {{- omit .Values.prometheus.podSecurityContext "enabled" | toYaml | nindent 4 }}

charts/enterprise/traefik/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 21.0.0
+version: 21.0.4
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/traefik/templates/_args.tpl

@@ -173,9 +173,14 @@ args:
   {{/* End of GeoBlock */}}
   {{/* RealIP */}}
   {{- if .Values.middlewares.realIP }}
-  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/soulbalz/traefik-real-ip"
+  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/jramsgz/traefik-real-ip"
   {{- end }}
   {{/* End of RealIP */}}
+  {{/* ModSecurity */}}
+  {{- if .Values.middlewares.modsecurity }}
+  - "--experimental.localPlugins.traefik-modsecurity-plugin.modulename=github.com/acouvreur/traefik-modsecurity-plugin"
+  {{- end }}
+  {{/* End of ModSecurity */}}
   {{- with .Values.additionalArguments }}
   {{- range . }}
   - {{ . | quote }}

charts/enterprise/traefik/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/traefik
-  tag: 2.10.4@sha256:028687caa7680c6189c52a6dd28ffd17c3d0a747885ad83b3027fa74023a0fec
+  tag: 2.10.4@sha256:77766fb3eb739197d7e229bfa8afb3a4a740886e3effef474ca4c9efdf65e5ab
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "1.29.1"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 22.0.0
+version: 23.0.1
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: v1.29.1@sha256:5a670aee4b1a57a5a414607f9222f558ab365625f64ff78885f7776971c95b54
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain

charts/incubator/automatic-ripping-machine/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "2.6.60"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.1
+deprecated: false
+description: Automatic Ripping Machine (ARM) Scripts.
+home: https://truecharts.org/charts/incubator/automatic-ripping-machine
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/automatic-ripping-machine.png
+keywords:
+  - automatic-ripping-machine
+  - media
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: automatic-ripping-machine
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/automatic-ripping-machine
+  - https://github.com/automatic-ripping-machine/automatic-ripping-machine
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - media
+  truecharts.org/SCALE-support: "true"

charts/incubator/automatic-ripping-machine/docs/default_credentials.md

@@ -0,0 +1,4 @@
+# Default Credentials
+
+- Username: `admin`
+- Password: `password`

charts/incubator/automatic-ripping-machine/docs/installation_notes.md

@@ -0,0 +1,23 @@
+# Installation Notes
+
+Installation notes and warnings for A.R.M
+
+:::warning
+
+This app uses advanced privileges aka "GOD MODE" on the host
+
+:::
+
+Configure the app and storage.
+
+Mount your dvd with host and container path : `/dev/sr0`.
+
+Do the same for all DVD burners you want to mount.
+
+- `/dev/sr0`
+- `/dev/sr1`
+- `/dev/sr2`
+- `/dev/sr3`
+- `/dev/sr4`
+
+![dvd-mount](./imgs/dvd-mount.png)

charts/incubator/automatic-ripping-machine/questions.yaml

@@ -0,0 +1,100 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+
+
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+# Include{serviceMain}
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 10683
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: arm
+          label: "App Arm Storage"
+          description: "Stores the Application Arm."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/incubator/automatic-ripping-machine/values.yaml

@@ -0,0 +1,42 @@
+image:
+  repository: tccr.io/truecharts/automatic-ripping-machine
+  pullPolicy: IfNotPresent
+  tag: v2.6.60@sha256:80794ea2bcf0372856f83c980ee65f26eacd3253b9c97215e686fb85e2df969b
+
+securityContext:
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+    allowPrivilegeEscalation: true
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        targetPort: 8080
+        port: 10683
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            # default media perms
+            ARM_UID: "{{ .Values.securityContext.container.PUID }}"
+            ARM_GID: "{{ .Values.securityContext.pod.fsGroup }}"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: "/etc/arm/config"
+  arm:
+    enabled: true
+    mountPath: "/home/arm"
+
+portal:
+  open:
+    enabled: true

charts/incubator/eco/Chart.yaml

@@ -1,15 +1,11 @@
-annotations:
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - GameServers
 apiVersion: v2
 appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.3
 deprecated: false
-description: "This Chart will download and install SteamCMD. It will also install ECO and run it."
+description: A custom SteamCMD chart that runs ECO.
 home: https://truecharts.org/charts/incubator/eco
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/eco.png
 keywords:
@@ -23,6 +19,10 @@ maintainers:
 name: eco
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/eco
-  - https://www.steampowered.com/
+  - https://github.com/ich777/docker-steamcmd-server/tree/eco
 type: application
-version: 2.0.8
+version: 3.1.1
+annotations:
+  truecharts.org/catagories: |
+    - games
+  truecharts.org/SCALE-support: "true"

charts/incubator/eco/questions.yaml

@@ -10,71 +10,150 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: secretEnv
-    group: "App Configuration"
-    label: "Image Secrets"
+  - variable: eco
+    group: App Configuration
+    label: Eco
     schema:
       additional_attrs: true
       type: dict
       attrs:
-        - variable: USERNAME
-          label: "USERNAME"
-          description: "Your Steam username goes here if you want to install a game that needs a valid account, otherwise leave it blank (ATTENTION You have to disable Steam Guard)."
+        - variable: game
+          label: Game Configuration
           schema:
-            type: string
-            default: ""
-        - variable: PASSWRD
-          label: "PASSWRD"
-          description: "Your Steam password goes here if you want to install a game that needs a valid account, otherwise leave it blank (ATTENTION You have to disable Steam Guard)."
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: id
+                label: Game Id
+                description: The ID of the container to download at start up.
+                schema:
+                  type: string
+                  required: true
+                  default: "739590"
+              - variable: user
+                label: Steam User
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: password
+                label: Steam Password
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: validate
+                label: Validate
+                description: Validates the game data.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: params
+                label: Game Params
+                schema:
+                  type: list
+                  default: []
+                  required: true
+                  items:
+                    - variable: param
+                      label: Param
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+        - variable: network
+          label: Network Configuration
           schema:
-            type: string
-            private: true
-            default: ""
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
-    schema:
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: GAME_ID
-          label: "GAME_ID"
-          description: "The GAME_ID that the container download at startup.(https://developer.valvesoftware.com/wiki/Dedicated_Servers_List)"
-          schema:
-            type: string
-            default: "739590"
-        - variable: GAME_PARAMS
-          label: "GAME_PARAMS"
-          description: "Enter your start up commands for the server."
-          schema:
-            type: string
-            default: ""
-        - variable: VALIDATE
-          label: "VALIDATE"
-          description: "Set the Variable to true if you want to validate the installation otherwise leave it blank."
-          schema:
-            type: boolean
-            default: true
-        - variable: DATA_PERM
-          label: "DATA_PERM"
-          description: "Container Variable DATAPERM"
-          schema:
-            type: string
-            default: "770"
-        - variable: UMASK
-          label: "UMASK"
-          description: "Container Variable UMASK"
-          schema:
-            type: string
-            default: "000"
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: PublicServer
+                label: Public Server
+                description: Defines if other players can see server.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: Playtime
+                label: Play time
+                schema:
+                  type: string
+                  default: ""
+              - variable: DiscordAddress
+                label: Discord Address
+                description: Invite link ID for a Discord server.
+                schema:
+                  type: string
+                  default: ""
+              - variable: Password
+                label: Password
+                description: Defines if a server's password.
+                schema:
+                  type: string
+                  default: ""
+              - variable: Description
+                label: Server Name
+                description: Defines the name of the server.
+                schema:
+                  type: string
+                  default: "Truecharts ECO Server"
+              - variable: DetailedDescription
+                label: Detailed Description
+                description: Defines the server's description.
+                schema:
+                  type: string
+                  default: "Vanilla ECO game"
+              - variable: ServerCategory
+                label: Server Category
+                description: Set the server Category.
+                schema:
+                  type: string
+                  default: "None"
+                  enum:
+                    - value: None
+                      description: None
+                    - value: Beginner
+                      description: Beginner
+                    - value: Established
+                      description: Established
+                    - value: BeginnerHard
+                      description: BeginnerHard
+                    - value: Strange
+                      description: Strange
+              - variable: RemoteAddress
+                label: Remote Address
+                description: Public/external IP-address or domain and port number needed to reach the server.
+                schema:
+                  type: string
+                  default: "localhost:3000/"
+              - variable: WebServerUrl
+                label: Web Server Url
+                description: Public/external web sever URL.
+                schema:
+                  type: string
+                  default: "localhost:3001"
+              - variable: Rate
+                label: Rate
+                description: The network rate used to communicate between server and client.
+                schema:
+                  type: int
+                  default: 20
+              - variable: MaxConnections
+                label: Max Connections
+                description: Maximum number of concurrent players (-1 no limits).
+                schema:
+                  type: int
+                  default: -1
+
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
         - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
+          label: Main Service
+          description: The Primary service on which the Minecraft Server runs on
           schema:
             additional_attrs: true
             type: dict
@@ -82,36 +161,36 @@ questions:
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
-                      label: "Main Service Port Configuration"
+                      label: Main Service Port Configuration
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
+                            label: Port
+                            description: This port exposes the container port on the service
                             schema:
                               type: int
                               default: 3001
                               required: true
-        - variable: udpgameport
-          label: 'udpgameport service'
-          description: "UDP Game Port"
+        - variable: game
+          label: Game Service
+          description: The Game service.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
-                    - variable: udpgameport
-                      label: "udpgameport Service Port Configuration"
+                    - variable: game
+                      label: Game Service Port Configuration
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
+                            label: Port
+                            description: This port exposes the container port on the service
                             schema:
                               type: int
                               default: 3000
@@ -121,16 +200,16 @@ questions:
 # Include{serviceList}
 # Include{persistenceRoot}
         - variable: steamcmd
-          label: "steamcmd Storage"
-          description: "Container Path serverdatasteamcmd"
+          label: App SteamCMD Storage
+          description: Stores the Application SteamCMD.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
         - variable: serverfiles
-          label: "serverfiles Storage"
-          description: "Container Path serverdataserverfiles"
+          label: App Server Files Storage
+          description: Stores the Application Server Files.
           schema:
             additional_attrs: true
             type: dict
@@ -139,7 +218,7 @@ questions:
 # Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
-          label: "Main Ingress"
+          label: Main Ingress
           schema:
             additional_attrs: true
             type: dict

charts/incubator/eco/templates/_configmap.tpl

@@ -0,0 +1,12 @@
+{{/* Define the configmap */}}
+{{- define "eco.configmaps" -}}
+
+{{- $network := .Values.eco.network -}}
+
+eco-network:
+  enabled: true
+  data:
+    Network.eco: |
+      {{ $network | toJson }}
+
+{{- end -}}

charts/incubator/eco/templates/common.yaml

@@ -1,2 +1,11 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . -}}
+
+{{/* Render configmaps for all pods */}}
+{{- $configmaps := include "eco.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+  {{- $_ := mustMergeOverwrite .Values.configmap $configmaps -}}
+{{- end -}}
+
 {{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{- include "tc.v1.common.loader.apply" . -}}

charts/incubator/eco/values.yaml

@@ -1,49 +1,94 @@
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/eco
-  tag: latest@sha256:7b380486ce590ba0bb9b3361f84464727126611771ba746210f7a73180d7b987
-
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
+  tag: latest@sha256:b68c9690ea433e1d94363ebf5384342652ab2d9316a2d71c740202669c76aca5
 
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
-
-secretEnv:
-  USERNAME: ""
-  PASSWRD: ""
-
-env:
-  DATA_PERM: "770"
-  GAME_ID: "739590"
-  GAME_PARAMS: ""
-  VALIDATE: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
 
 service:
   main:
     ports:
       main:
+        protocol: tcp
         port: 3001
-        protocol: HTTP
-        targetPort: 3001
-  udpgameport:
+  game:
     enabled: true
     ports:
-      udpgameport:
+      game:
         enabled: true
+        protocol: udp
         port: 3000
-        protocol: UDP
-        targetPort: 3000
+
+eco:
+  game:
+    id: 739590
+    user: ""
+    password: ""
+    validate: false
+    params: []
+  network:
+    PublicServer: true
+    Playtime: ""
+    DiscordAddress: ""
+    Password: ""
+    # server name
+    Description: "Truecharts ECO Server"
+    # server description
+    DetailedDescription: "Vanilla ECO game"
+    ServerCategory: "None"
+    RemoteAddress: "localhost:3000/"
+    IPAddress: "Any"
+    GameServerPort: "{{ .Values.service.game.ports.game.port }}"
+    WebServerPort: "{{ .Values.service.main.ports.main.port }}"
+    WebServerUrl: "localhost:3001"
+    Rate: 20
+    MaxConnections: -1
+    UPnPEnabled: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              enabled: true
+              type: tcp
+            readiness:
+              enabled: true
+              type: tcp
+            startup:
+              enabled: true
+              type: tcp
+          env:
+            STEAMCMD_DIR: "{{ .Values.persistence.steamcmd.mountPath }}"
+            SERVER_DIR: "{{ .Values.persistence.serverfiles.mountPath }}"
+            GAME_ID: "{{ .Values.eco.game.id }}"
+            USERNAME: "{{ .Values.eco.game.user }}"
+            PASSWRD: "{{ .Values.eco.game.password }}"
+            GAME_PARAMS: '{{ join " " .Values.eco.game.params }}'
+            VALIDATE: "{{ .Values.eco.game.validate }}"
 
 persistence:
-  serverfiles:
-    enabled: true
-    mountPath: /serverdata/serverfiles
   steamcmd:
     enabled: true
     mountPath: /serverdata/steamcmd
+  serverfiles:
+    enabled: true
+    mountPath: /serverdata/serverfiles
+  network-config:
+    enabled: true
+    type: configmap
+    objectName: eco-network
+    mountPath: /serverdata/serverfiles/Configs/Network.eco
+    subPath: Network.eco
+    readOnly: true
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/factorio/Chart.yaml

@@ -1,27 +1,27 @@
 apiVersion: v2
-kubeVersion: ">=1.16.0-0"
-name: factorio
-version: 4.0.9
 appVersion: "stable"
-description: "This Chart Chart will download the latest stable release of the game, generate the map and you're ready to play."
-type: application
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.3
 deprecated: false
+description: A game in which you build and maintain factories.
 home: https://truecharts.org/charts/incubator/factorio
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/factorio.png
 keywords:
   - factorio
   - GameServers
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/incubator/factorio
-  - https://www.factorio.com/
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 13.2.2
+kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
     name: TrueCharts
     url: https://truecharts.org
+name: factorio
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/factorio
+  - https://github.com/factoriotools/factorio-docker
+type: application
+version: 4.1.0
 annotations:
   truecharts.org/catagories: |
     - GameServers

charts/incubator/factorio/questions.yaml

@@ -4,9 +4,11 @@ questions:
 # Include{global}
 # Include{workload}
 # Include{workloadDeployment}
+
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
                                 - variable: env
                                   group: App Configuration
                                   label: Image Environment
@@ -42,8 +44,8 @@ questions:
                                         label: Update server mods BEFORE starting the server
                                         description: If mods should be updated before starting the server
                                         schema:
-                                          type: string
-                                          default: ""
+                                          type: boolean
+                                          default: false
                                       - variable: USERNAME
                                         label: Factorio.com Username
                                         description: Import your factorio.com username
@@ -106,7 +108,7 @@ questions:
 # Include{persistenceRoot}
         - variable: config
           label: App Config Storage
-          description: Container Path factorio
+          description: Stores the Application Config.
           schema:
             additional_attrs: true
             type: dict
@@ -135,7 +137,7 @@ questions:
                   default: 0
               - variable: runAsGroup
                 label: runAsGroup
-                description: The groupID this App of the user running the application
+                description: The groupID of the user running the application
                 schema:
                   type: int
                   default: 0

charts/incubator/factorio/values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/factorio
-  tag: vstable@sha256:6a8a24374e3582abaebf34c9062627914c020d57d2ad88322e53eedf2c767c53
+  tag: vstable@sha256:110b9147fd5535d4ee6d5b1845b6e0a071a9e8bc4bfe854654c1fa2530d1bd16
 
 securityContext:
   container:
@@ -10,33 +10,12 @@ securityContext:
     runAsGroup: 0
     runAsUser: 0
 
-workload:
-  main:
-    podSpec:
-      containers:
-        main:
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-            startup:
-              enabled: false
-          env:
-            GENERATE_NEW_SAVE: false
-            LOAD_LATEST_SAVE: true
-            SAVE_NAME: "_autosave1"
-            TOKEN: ""
-            UPDATE_MODS_ON_START: ""
-            USERNAME: ""
-
 service:
   main:
     ports:
       main:
         port: 34197
         protocol: udp
-        targetPort: 34197
   rcon:
     enabled: true
     ports:
@@ -44,7 +23,31 @@ service:
         enabled: true
         port: 27015
         protocol: tcp
-        targetPort: 27015
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              type: tcp
+              port: "{{ .Values.service.rcon.ports.rcon.port }}"
+            readiness:
+              type: tcp
+              port: "{{ .Values.service.rcon.ports.rcon.port }}"
+            startup:
+              type: tcp
+              port: "{{ .Values.service.rcon.ports.rcon.port }}"
+          env:
+            PORT: "{{ .Values.service.main.ports.main.port }}"
+            RCON_PORT: "{{ .Values.service.rcon.ports.rcon.port }}"
+            GENERATE_NEW_SAVE: false
+            LOAD_LATEST_SAVE: true
+            SAVE_NAME: "_autosave1"
+            TOKEN: ""
+            UPDATE_MODS_ON_START: ""
+            USERNAME: ""
 
 persistence:
   config:

charts/incubator/firezone/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "0.7.30"
+appVersion: "0.7.35"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.3
 deprecated: false
 description: WireGuard-based VPN server and egress firewall
 home: https://truecharts.org/charts/incubator/firezone
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/firezone
   - https://github.com/firezone/firezone
 type: application
-version: 0.0.8
+version: 0.2.1
 annotations:
   truecharts.org/catagories: |
     - vpn

charts/incubator/firezone/questions.yaml

@@ -11,232 +11,229 @@ questions:
 # Include{podSpec}
 # Include{containerMain}
 
-                                - variable: env
-                                  label: Image Environment
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: EXTERNAL_URL
-                                        label: External Url
-                                        description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_EMAIL
-                                        label: Default Admin Email
-                                        description: Primary administrator email.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_PASSWORD
-                                        label: Default Admin Password
-                                        description: Primary administrator password.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          private: true
-                                          default: ""
-                                      - variable: RESET_ADMIN_ON_BOOT
-                                        label: Reset Admin On Boot
-                                        description: to create or reset the admin password every time FireZone starts.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: TELEMETRY_ENABLED
-                                        label: Telemetry Enabled
-                                        description: Enable or disable the FireZone telemetry collection.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: devices
-                                        label: Devices Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT
-                                              label: Allow Unprivileged Devices
-                                              description: Enable or disable management of devices on unprivileged accounts.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION
-                                              label: Allow Unprivileged Device Configuration
-                                              description: Enable or disable configuration of device network settings for unprivileged users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: VPN_SESSION_DURATION
-                                              label: VPN Session Duration
-                                              description: Optionally require users to periodically authenticate to the FireZone, Interval for WireGuard persistent keepalive.
-                                              schema:
-                                                type: int
-                                                default: 0
-                                            - variable: DEFAULT_CLIENT_PERSISTENT_KEEPALIVE
-                                              label: Default Client Persistent KeepAlive
-                                              description: send a keepalive packet every 25 seconds. Otherwise, keep it disabled with a 0 default value.
-                                              schema:
-                                                type: int
-                                                default: 25
-                                            - variable: DEFAULT_CLIENT_MTU
-                                              label: Default Client MTU
-                                              description: WireGuard interface MTU for devices.
-                                              schema:
-                                                type: int
-                                                default: 1280
-                                            - variable: DEFAULT_CLIENT_ENDPOINT
-                                              label: Default Client EndPoint
-                                              description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to. Defaults to this server's FQDN.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: DEFAULT_CLIENT_DNS
-                                              label: Default Client DNS
-                                              description: Comma-separated list of DNS servers to use for devices.
-                                              schema:
-                                                type: string
-                                                default: "1.1.1.1,1.0.0.1"
-                                            - variable: DEFAULT_CLIENT_ALLOWED_IPS
-                                              label: Default Client Allowed IPs
-                                              description: AllowedIPs determines which destination IPs get routed through FireZone.
-                                              schema:
-                                                type: string
-                                                default: "0.0.0.0/0,::/0"
-                                            - variable: MAX_DEVICES_PER_USER
-                                              label: Max Devices Per User
-                                              description: Changes how many devices a user can have at a time.
-                                              schema:
-                                                type: int
-                                                default: 10
-                                      - variable: authorization
-                                        label: Authorization Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: LOCAL_AUTH_ENABLED
-                                              label: Local Auth Enabled
-                                              description: Enable or disable the local authentication method for all users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: DISABLE_VPN_ON_OIDC_ERROR
-                                              label: Disable VPN On OIDC Error
-                                              description: Enable or disable auto disabling VPN connection on OIDC refresh error.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: wireguard
-                                        label: Wireguard Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: WIREGUARD_IPV4_ENABLED
-                                              label: WireGuard IPV4 Enabled
-                                              description: Enable or disable IPv4 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: WIREGUARD_IPV6_ENABLED
-                                              label: WireGuard IPV6 Enabled
-                                              description: Enable or disable IPv6 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: outbound
-                                        label: OutBound Email Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: OUTBOUND_EMAIL_FROM
-                                              label: Outbound Email From
-                                              description: From address to use for sending outbound emails.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: OUTBOUND_EMAIL_ADAPTER
-                                              label: Outbound Email Adapter
-                                              description: Method to use for sending outbound email.
-                                              schema:
-                                                type: string
-                                                default: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                enum:
-                                                  - value: "Elixir.FzHttpWeb.Mailer.AmazonSES"
-                                                    description: "AmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.CustomerIO"
-                                                    description: CustomerIO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Dyn"
-                                                    description: Dyn
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ExAwsAmazonSES"
-                                                    description: ExAwsAmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Gmail"
-                                                    description: Gmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.MailPace"
-                                                    description: MailPace"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailgun"
-                                                    description: Mailgun"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailjet"
-                                                    description: MailJet"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mandrill"
-                                                    description: Mandrill"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Postmark"
-                                                    description: Postmark"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ProtonBridge"
-                                                    description: ProtonBridge"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP"
-                                                    description: SMTP"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP2GO"
-                                                    description: SMTP2GO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendgrid"
-                                                    description: SendGrid"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendinblue"
-                                                    description: "SendInBlue"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendmail"
-                                                    description: "Sendmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SocketLabs"
-                                                    description: "SocketLabs"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SparkPost"
-                                                    description: "SparkPost"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                    description: "NoopAdapter"
-                                            - variable: OUTBOUND_EMAIL_ADAPTER_OPTS
-                                              label: Outbound Email Adapter OPTS
-                                              description: Adapter configuration, see https://github.com/swoosh/swoosh#adapters.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                      - variable: connectivity
-                                        label: Connectivity Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: CONNECTIVITY_CHECKS_ENABLED
-                                              label: Connectivity Checks Enabled
-                                              description:     Enable / disable periodic checking for egress connectivity. Determines the instance's public IP to populate Endpoint fields.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: CONNECTIVITY_CHECKS_INTERVAL
-                                              label: Connectivity Checks Interval
-                                              description: Periodicity in seconds to check for egress connectivity.
-                                              schema:
-                                                type: int
-                                                default: 43200
-
 # Include{containerBasic}
 # Include{containerAdvanced}
 
+  - variable: firezone
+    group: App Configuration
+    label: FireZone
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: web
+          label: Web Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: external_url
+                label: External Url
+                description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: trusted_proxies
+                label: Trusted Proxies
+                description: List of trusted reverse proxies.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: proxy
+                      label: Proxy IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: private_clients
+                label: Private Clients
+                description: List of trusted clients.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: client_ip
+                      label: Client IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: secure_cookies
+                label: Secure Cookies
+                description: Enable or disable requiring secure cookies. Required for HTTPS.
+                schema:
+                  type: boolean
+                  default: true
+        - variable: admin
+          label: Admin Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: reset_admin_on_boot
+                label: Reset Admin On Boot
+                description: to create or reset the admin password every time Firezone starts. By default, the admin password is only set when Firezone is installed.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: default_email
+                label: Default Email
+                description: Primary administrator email.
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: default_password
+                label: Default Password
+                description: Default password that will be used for creating or resetting the primary administrator account.
+                schema:
+                  type: string
+                  required: true
+                  private: true
+                  default: ""
+        - variable: devices
+          label: Devices Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: allow_unprivileged_device_management
+                label: Allow Unprivileged Device Management
+                description: Enable or disable management of devices on unprivileged accounts.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: allow_unprivileged_device_config
+                label: Allow Unprivileged Device Configuration
+                description: Enable or disable configuration of device network settings for unprivileged users.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: vpn_session_duration
+                label: VPN Session Duration
+                description: Optionally require users to periodically authenticate to the Firezone web UI in order to keep their VPN sessions active.
+                schema:
+                  type: int
+                  default: 0
+              - variable: client_persistent_keepalive
+                label: Client Persistent KeepAlive
+                description: If you experience NAT or firewall traversal problems, you can enable this to send a keepalive packet every 25 seconds, disabled by setting it to 0.
+                schema:
+                  type: int
+                  default: 0
+              - variable: default_client_mtu
+                label: Default Client MTU
+                description: WireGuard interface MTU for devices.
+                schema:
+                  type: int
+                  default: 1280
+              - variable: client_endpoint
+                label: Client Endpoint
+                description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to.
+                schema:
+                  type: string
+                  default: ""
+              - variable: client_dns
+                label: Client DNS
+                description: List of DNS servers to use for devices.
+                schema:
+                  type: list
+                  empty: false
+                  required: true
+                  default:
+                    - 1.1.1.1
+                    - 1.0.0.1
+                  items:
+                    - variable: dns
+                      label: DNS
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: client_allowed_ips
+                label: Client Allowed Ips
+                description: Configures the default AllowedIPs setting for devices.
+                schema:
+                  type: list
+                  empty: false
+                  default:
+                    - 0.0.0.0/0
+                  items:
+                    - variable: ip
+                      label: IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: max_devices_per_user
+                label: Max Devices Per User
+                description: Changes how many devices a user can have at a time.
+                schema:
+                  type: int
+                  default: 10
+        - variable: authorization
+          label: Authorization Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: local_auth_enabled
+                label: Local Auth Enabled
+                description: Enable or disable the local authentication method for all users.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: disable_vpn_on_oidc_error
+                label: Disable VPN On OIDC Error
+                description: Enable or disable auto disabling VPN connection on OIDC refresh error.
+                schema:
+                  type: boolean
+                  default: false
+        - variable: wireguard
+          label: Wireguard Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: ipv4_masquerade_enabled
+                label: IPv4 Masquerade Enabled
+                description: Enable or disable IPv4 masqeurading.
+                schema:
+                  type: boolean
+                  default: true
+        - variable: connectivity
+          label: Connectivity Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: checks_enabled
+                label: Checks Enabled
+                description: Enable / disable periodic checking for egress connectivity.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: checks_interval
+                label: Checks Interval
+                description: Periodicity in seconds to check for egress connectivity.
+                schema:
+                  type: int
+                  default: 43200
+        - variable: other
+          label: Other Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: telemetry_enabled
+                label: Telemetry Enabled
+                description: Enable or disable the Firezone telemetry collection.
+                schema:
+                  type: boolean
+                  default: false
+
 # Include{containerConfig}
 # Include{podOptions}
 # Include{serviceRoot}

charts/incubator/firezone/templates/_secrets.tpl

@@ -1,12 +1,15 @@
 {{/* Define the secrets */}}
 {{- define "firezone.secrets" -}}
 {{- $secretName := (printf "%s-firezone-secrets" (include "tc.v1.common.lib.chart.names.fullname" $)) -}}
-{{- $keyGuardian := randAlphaNum 64 -}}
-{{- $keyDatabase := randAlphaNum 64 -}}
-{{- $keySecret := randAlphaNum 64 -}}
-{{- $keyLive := randAlphaNum 64 -}}
-{{- $keyCookieSigning := randAlphaNum 64 -}}
-{{- $keyCookieEncrypt := randAlphaNum 64 -}}
+
+# firezone requires all these keys to be in base 64 | b64enc format presented in the container, so this b64enc here is intentional
+# https://www.firezone.dev/docs/reference/env-vars#secrets-and-encryption
+{{- $keyGuardian := randAlphaNum 48 | b64enc -}}
+{{- $keyDatabase := randAlphaNum 32 | b64enc -}}
+{{- $keySecret := randAlphaNum 48 | b64enc -}}
+{{- $keyLive := randAlphaNum 24 | b64enc -}}
+{{- $keyCookieSigning := randAlphaNum 6 | b64enc -}}
+{{- $keyCookieEncrypt := randAlphaNum 6 | b64enc -}}
 {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
   {{- $keyGuardian = index .data "GUARDIAN_SECRET_KEY" | b64dec -}}
   {{- $keyDatabase = index .data "DATABASE_ENCRYPTION_KEY" | b64dec -}}

charts/incubator/firezone/templates/common.yaml

@@ -4,7 +4,7 @@
 {{/* Render secrets for firezone */}}
 {{- $secrets := include "firezone.secrets" . | fromYaml -}}
 {{- if $secrets -}}
-  {{- $_ := set .Values.secret "secrets" $secrets -}}
+  {{- $_ := set .Values.secret "firezone-secrets" $secrets -}}
 {{- end -}}
 
 {{/* Render the templates */}}

charts/incubator/firezone/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/firezone
   pullPolicy: IfNotPresent
-  tag: v0.7.30@sha256:e22dc7a9be93a804bbe0e3d301c883625463a3649d856c8b41f80a2257214667
+  tag: v0.7.35@sha256:53c08baeb65dde8689ebb3bd1fc9fbb034970dfdc9bceb005c4ffa03fe2b3e93
 
 securityContext:
   container:
@@ -15,26 +15,66 @@ securityContext:
         - NET_ADMIN
         - SYS_MODULE
 
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 13000
+  wireguard:
+    enabled: true
+    ports:
+      wireguard:
+        enabled: true
+        protocol: udp
+        port: 51820
+
+firezone:
+  web:
+    external_url: "https://example.com"
+    trusted_proxies: []
+    private_clients: []
+  admin:
+    reset_admin_on_boot: false
+    default_email: "admin@email.com"
+    default_password: "1234567890"
+  devices:
+    allow_unprivileged_device_management: true
+    allow_unprivileged_device_config: true
+    vpn_session_duration: 0
+    client_persistent_keepalive: 25
+    default_client_mtu: 1280
+    client_endpoint: ""
+    client_dns:
+      - 1.1.1.1
+      - 1.0.0.1
+    client_allowed_ips:
+      - 0.0.0.0/0
+    max_devices_per_user: 10
+  authorization:
+    local_auth_enabled: true
+    disable_vpn_on_oidc_error: false
+  wireguard:
+    ipv4_masquerade_enabled: true
+  connectivity:
+    checks_enabled: true
+    checks_interval: 43200
+  other:
+    telemetry_enabled: false
+
 workload:
   main:
     podSpec:
       containers:
         main:
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-            startup:
-              enabled: false
           env:
             # web
             PHOENIX_HTTP_PORT: "{{ .Values.service.main.ports.main.port }}"
-            EXTERNAL_URL: "https://app.mydomain.com"
-            # PHOENIX_SECURE_COOKIES: true
+            EXTERNAL_URL: "{{ .Values.firezone.web.external_url }}"
+            PHOENIX_SECURE_COOKIES: "{{ .Values.firezone.web.secure_cookies }}"
             # PHOENIX_HTTP_PROTOCOL_OPTIONS: "{}"
-            # PHOENIX_EXTERNAL_TRUSTED_PROXIES: "[]"
-            # PHOENIX_PRIVATE_CLIENTS: "[]"
+            PHOENIX_EXTERNAL_TRUSTED_PROXIES: "{{ toJson .Values.firezone.web.trusted_proxies }}"
+            PHOENIX_PRIVATE_CLIENTS: "{{ toJson .Values.firezone.web.private_clients }}"
             # DB
             DATABASE_HOST:
               secretKeyRef:
@@ -51,49 +91,49 @@ workload:
             DATABASE_SSL_ENABLED: false
             # DATABASE_SSL_OPTS: "{}"
             # Admin
-            RESET_ADMIN_ON_BOOT: false
-            DEFAULT_ADMIN_EMAIL: "admin@email.com"
-            DEFAULT_ADMIN_PASSWORD: "1234567890"
+            RESET_ADMIN_ON_BOOT: "{{ .Values.firezone.admin.reset_admin_on_boot }}"
+            DEFAULT_ADMIN_EMAIL: "{{ .Values.firezone.admin.default_email }}"
+            DEFAULT_ADMIN_PASSWORD: "{{ .Values.firezone.admin.default_password }}"
             # Secrets and Encryption
             GUARDIAN_SECRET_KEY:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: GUARDIAN_SECRET_KEY
             DATABASE_ENCRYPTION_KEY:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: DATABASE_ENCRYPTION_KEY
             SECRET_KEY_BASE:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: SECRET_KEY_BASE
             LIVE_VIEW_SIGNING_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: LIVE_VIEW_SIGNING_SALT
             COOKIE_SIGNING_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: COOKIE_SIGNING_SALT
             COOKIE_ENCRYPTION_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: COOKIE_ENCRYPTION_SALT
             # Devices
-            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: true
-            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: true
-            VPN_SESSION_DURATION: 0
-            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: 25
-            DEFAULT_CLIENT_MTU: 1280
-            # DEFAULT_CLIENT_ENDPOINT: ""
-            DEFAULT_CLIENT_DNS: "1.1.1.1,1.0.0.1"
-            DEFAULT_CLIENT_ALLOWED_IPS: "0.0.0.0/0, ::/0"
+            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: "{{ .Values.firezone.devices.allow_unprivileged_device_management }}"
+            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: "{{ .Values.firezone.devices.allow_unprivileged_device_config }}"
+            VPN_SESSION_DURATION: "{{ .Values.firezone.devices.vpn_session_duration }}"
+            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: "{{ .Values.firezone.devices.client_persistent_keepalive }}"
+            DEFAULT_CLIENT_MTU: "{{ .Values.firezone.devices.default_client_mtu }}"
+            DEFAULT_CLIENT_ENDPOINT: "{{ .Values.firezone.devices.client_endpoint }}"
+            DEFAULT_CLIENT_DNS: '{{ join "," .Values.firezone.devices.client_dns }}'
+            DEFAULT_CLIENT_ALLOWED_IPS: '{{ join "," .Values.firezone.devices.client_allowed_ips }}'
             # Limits
-            MAX_DEVICES_PER_USER: 10
+            MAX_DEVICES_PER_USER: "{{ .Values.firezone.devices.max_devices_per_user }}"
             # Authorization
-            LOCAL_AUTH_ENABLED: true
-            DISABLE_VPN_ON_OIDC_ERROR: false
-            SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
+            LOCAL_AUTH_ENABLED: "{{ .Values.firezone.authorization.local_auth_enabled }}"
+            DISABLE_VPN_ON_OIDC_ERROR: "{{ .Values.firezone.authorization.disable_vpn_on_oidc_error }}"
+            # SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
             # SAML_KEYFILE_PATH: "/var/firezone/saml.key"
             # SAML_CERTFILE_PATH: "/var/firezone/saml.crt"
             # OPENID_CONNECT_PROVIDERS: "[]"
@@ -101,30 +141,18 @@ workload:
             # WireGuard
             WIREGUARD_PORT: "{{ .Values.service.wireguard.ports.wireguard.port }}"
             WIREGUARD_IPV4_ENABLED: true
+            WIREGUARD_IPV4_MASQUERADE: "{{ .Values.firezone.wireguard.ipv4_masquerade_enabled }}"
             WIREGUARD_IPV6_ENABLED: false
+            WIREGUARD_IPV6_MASQUERADE: false
             # Outbound Emails
-            OUTBOUND_EMAIL_FROM: ""
-            OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
+            # OUTBOUND_EMAIL_FROM: ""
+            # OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
             # OUTBOUND_EMAIL_ADAPTER_OPTS: "{}"
             # Connectivity Checks
-            CONNECTIVITY_CHECKS_ENABLED: true
-            CONNECTIVITY_CHECKS_INTERVAL: 43200
+            CONNECTIVITY_CHECKS_ENABLED: "{{ .Values.firezone.connectivity.checks_enabled }}"
+            CONNECTIVITY_CHECKS_INTERVAL: "{{ .Values.firezone.connectivity.checks_interval }}"
             # Telemetry
-            TELEMETRY_ENABLED: false
-
-service:
-  main:
-    ports:
-      main:
-        protocol: http
-        port: 13000
-  wireguard:
-    enabled: true
-    ports:
-      wireguard:
-        enabled: true
-        protocol: udp
-        port: 51820
+            TELEMETRY_ENABLED: "{{ .Values.firezone.other.telemetry_enabled }}"
 
 persistence:
   config:

charts/incubator/homebridge/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2023"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: A lightweight NodeJS server that emulates the iOS HomeKit API
 home: https://truecharts.org/charts/incubator/homebridge
@@ -22,7 +22,7 @@ sources:
   - https://homebridge.io/
   - https://github.com/oznu/docker-homebridge
 type: application
-version: 3.1.0
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/homebridge/questions.yaml

@@ -10,29 +10,26 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: Main Service
-          description: The Primary service on which the healthcheck runs, often the webUI
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
-                      label: Main Service Port Configuration
+                      label: "Main Service Port Configuration"
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: Port
-                            description: This port exposes the container port on the service
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
                             schema:
                               type: int
                               default: 8581
@@ -52,7 +49,7 @@ questions:
 # Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
-          label: Main Ingress
+          label: "Main Ingress"
           schema:
             additional_attrs: true
             type: dict
@@ -62,29 +59,29 @@ questions:
 # Include{ingressTraefik}
 # Include{ingressAdvanced}
 # Include{ingressList}
+# Include{securityContextRoot}
 
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: runAsUser
-          description: The UserID of the user running the application
-          schema:
-            type: int
-            default: 0
-        - variable: runAsGroup
-          label: runAsGroup
-          description: The groupID this App of the user running the application
-          schema:
-            type: int
-            default: 0
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
-        - variable: fsGroup
-          label: fsGroup
-          description: The group that should own ALL storage.
-          schema:
-            type: int
-            default: 568
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
 
 # Include{resources}
 # Include{advanced}

charts/incubator/homebridge/templates/common.yaml

@@ -1 +1 @@
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/homebridge/values.yaml

@@ -4,22 +4,25 @@ image:
   tag: v2023-01@sha256:fa0512d8b38d20d4078b0f403c23c17716a045fcb4dc723b896461a766e22ee9
 
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsUser: 0
+    runAsGroup: 0
 
-podSecurityContext:
-  runAsUser: 0
-  runAsGroup: 0
-
-env:
-  HOMEBRIDGE_CONFIG_UI: 1
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            HOMEBRIDGE_CONFIG_UI: 1
 
 service:
   main:
     ports:
       main:
-        protocol: HTTP
-        targetPort: 8581
+        protocol: http
         port: 8581
 
 persistence:
@@ -28,4 +31,5 @@ persistence:
     mountPath: /homebridge
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/icloudpd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: iCloudPD, syncs photos from iDevices to a single directory on TrueNAS.
 home: https://truecharts.org/charts/incubator/icloudpd
@@ -23,7 +23,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/icloudpd
   - https://github.com/Womabre/-TrueNAS-docker-templates
 type: application
-version: 2.0.16
+version: 3.0.0
 annotations:
   truecharts.org/SCALE-support: "true"
   truecharts.org/catagories: |

charts/incubator/icloudpd/questions.yaml

@@ -212,6 +212,7 @@ questions:
               - value: Bark
                 description: Bark
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}

charts/incubator/icloudpd/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/icloudpd/values.yaml

@@ -3,13 +3,12 @@ image:
   repository: tccr.io/truecharts/icloudpd
   tag: latest@sha256:ab4b90c22a3bf93d6045cd26733447b143a66d5c9100a91c9bbea27f0443a838
 
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsGroup: 0
+    runAsUser: 0
 
 icloudpd:
   apple_id: your@appleid.com
@@ -35,7 +34,7 @@ icloudpd:
   delete_accompanying: false
   delete_empty_directories: false
   command_line_options: ""
-  notification_title: iCloud PD
+  notification_title: "iCloud PD"
   # https://github.com/boredazfcuk/docker-icloudpd/blob/master/NOTIFICATIONS.md
   notification_type: ""
   # prowl_api_key: ""
@@ -70,47 +69,51 @@ icloudpd:
   # bark_device_key: ""
   # bark_server: ""
 
-env:
-  user: apps
-  group: apps
-  user_id: "{{ .Values.security.PUID }}"
-  group_id: "{{ .Values.podSecurityContext.fsGroup }}"
-  download_path: /home/{{ .Values.env.user }}/iCloud
-  jpeg_path: /home/{{ .Values.env.user }}/iCloud
-  # User Defined
-  apple_id: "{{ .Values.icloudpd.apple_id }}"
-  synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
-  synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
-  notification_days: "{{ .Values.icloudpd.notification_days }}"
-  authentication_type: "{{ .Values.icloudpd.authentication_type }}"
-  skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
-  download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
-  delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
-  delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
-  delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
-  set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
-  auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
-  photo_size: "{{ .Values.icloudpd.photo_size }}"
-  skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
-  live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
-  skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
-  recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
-  until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
-  photo_album: "{{ .Values.icloudpd.photo_album }}"
-  convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
-  jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
-  icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
-  command_line_options: "{{ .Values.icloudpd.command_line_options }}"
-  notification_title: "{{ .Values.icloudpd.notification_title }}"
-  notification_type: "{{ .Values.icloudpd.notification_type }}"
-
-probes:
-  liveness:
-    enabled: false
-  readiness:
-    enabled: false
-  startup:
-    enabled: false
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            user: apps
+            group: apps
+            user_id: "{{ .Values.securityContext.container.runAsUser }}"
+            group_id: "{{ .Values.securityContext.container.runAsGroup }}"
+            download_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            jpeg_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            # User Defined
+            apple_id: "{{ .Values.icloudpd.apple_id }}"
+            synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
+            synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
+            notification_days: "{{ .Values.icloudpd.notification_days }}"
+            authentication_type: "{{ .Values.icloudpd.authentication_type }}"
+            skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
+            download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
+            delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
+            delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
+            delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
+            set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
+            auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
+            photo_size: "{{ .Values.icloudpd.photo_size }}"
+            skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
+            live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
+            skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
+            recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
+            until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
+            photo_album: "{{ .Values.icloudpd.photo_album }}"
+            convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
+            jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
+            icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
+            command_line_options: "{{ .Values.icloudpd.command_line_options }}"
+            notification_title: "{{ .Values.icloudpd.notification_title }}"
+            notification_type: "{{ .Values.icloudpd.notification_type }}"
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
 
 service:
   main:
@@ -128,4 +131,5 @@ persistence:
     mountPath: /home/apps/iCloud
 
 portal:
-  enabled: false
+  open:
+    enabled: false

charts/incubator/jenkins/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.392.0"
+appVersion: "2.422.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: The gold standard in devops tools for running CI/CD pipelines.
 home: https://truecharts.org/charts/incubator/jenkins
@@ -19,8 +19,9 @@ maintainers:
 name: jenkins
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/jenkins
+  - https://github.com/jenkinsci/docker
 type: application
-version: 3.0.15
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - productivity

charts/incubator/jenkins/questions.yaml

@@ -146,19 +146,18 @@ questions:
 # Include{ingressAdvanced}
 # Include{ingressList}
 # Include{securityContextRoot}
-
-        - variable: runAsUser
-          label: runAsUser
-          description: The UserID of the user running the application
-          schema:
-            type: int
-            default: 1000
-        - variable: runAsGroup
-          label: runAsGroup
-          description: The groupID this App of the user running the application
-          schema:
-            type: int
-            default: 1000
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 1000
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 1000
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
@@ -168,7 +167,6 @@ questions:
           schema:
             type: int
             default: 1000
-
 # Include{resources}
 # Include{advanced}
 # Include{addons}

charts/incubator/jenkins/templates/_secret.tpl

@@ -1,15 +1,7 @@
 {{/* Define the secret */}}
 {{- define "jenkins.secret" -}}
-
-{{- $secretName := printf "%s-secret" (include "tc.common.names.fullname" .) -}}
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: {{ $secretName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-stringData:
+enabled: true
+data:
   JAVA_OPTS: {{ join " " (include "java.opts" . | fromYaml).opts | quote }}
   JENKINS_OPTS: {{ join " " (include "jenkins.opts" . | fromYaml).opts | quote }}
   JENKINS_JAVA_OPTS: {{ join " " (include "jenkins.java.opts" . | fromYaml).opts | quote }}

charts/incubator/jenkins/templates/common.yaml

@@ -1,8 +1,11 @@
 {{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
+{{- include "tc.v1.common.loader.init" . }}
 
-{{/* Render secret */}}
-{{- include "jenkins.secret" . }}
+{{/* Render secrets for jenkins */}}
+{{- $secret := include "jenkins.secret" . | fromYaml -}}
+{{- if $secret -}}
+  {{- $_ := set .Values.secret "jenkins-secret" $secret -}}
+{{- end -}}
 
 {{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}
+{{ include "tc.v1.common.loader.apply" . }}

charts/incubator/jenkins/values.yaml

@@ -1,12 +1,14 @@
 image:
   repository: tccr.io/truecharts/jenkins
   pullPolicy: IfNotPresent
-  tag: 2.392.0@sha256:362ac8a36b4a1d603a0bce6e5c35097b33d6aae0544ba1cef8f300d2788dd09b
+  tag: 2.422.0@sha256:c046d180b498bbeab33fbcd0900ef14bcd4272fc85350f5cbdfa19b5ac45e283
 
-podSecurityContext:
-  runAsGroup: 1000
-  runAsUser: 1000
-  fsGroup: 1000
+security:
+  container:
+    runAsGroup: 1000
+    runAsUser: 1000
+  pod:
+    fsGroup: 1000
 
 # securityContext:
 #   readOnlyRootFilesystem: false
@@ -18,26 +20,29 @@ jenkins:
   plugins_force_upgrade: false
   upgrade_if_no_marker: false
 
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    type: HTTP
-    path: /login
-  readiness:
-    type: HTTP
-    path: /login
-  startup:
-    type: HTTP
-    path: /login
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              type: http
+              path: /login
+            readiness:
+              type: http
+              path: /login
+            startup:
+              type: tcp
+          envFrom:
+            - secretRef:
+                name: 'jenkins-secret'
 
 service:
   main:
     ports:
       main:
-        protocol: HTTP
+        protocol: http
         port: 10280
   agent:
     enabled: true
@@ -52,4 +57,5 @@ persistence:
     mountPath: /var/jenkins_home
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/kaizoku/Chart.yaml

@@ -0,0 +1,31 @@
+apiVersion: v2
+appVersion: "1.6.1"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.3
+  - condition: redis.enabled
+    name: redis
+    repository: https://deps.truecharts.org
+    version: 7.0.6
+deprecated: false
+description: A self-hosted manga downloader.
+home: https://truecharts.org/charts/incubator/kaizoku
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/kaizoku.png
+keywords:
+  - kaizoku
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: kaizoku
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/kaizoku
+  - https://github.com/oae/kaizoku
+type: application
+version: 0.1.0
+annotations:
+  truecharts.org/catagories: |
+    - media
+  truecharts.org/SCALE-support: "true"

charts/incubator/kaizoku/questions.yaml

@@ -10,31 +10,15 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
-    schema:
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: VNC_PASSWD
-          label: "VNC_PASSWD"
-          description: "Container Variable VNCPASSWD"
-          schema:
-            type: string
-            default: "123456"
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
@@ -48,15 +32,31 @@ questions:
                             description: "This port exposes the container port on the service"
                             schema:
                               type: int
-                              default: 5901
+                              default: 3000
                               required: true
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: configpath
-          label: "configpath Storage"
-          description: "Container Path configobs-studio"
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: logs
+          label: "App Logs Storage"
+          description: "Stores the Application Logs."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: data
+          label: "App Data Storage"
+          description: "Stores the Application Data."
           schema:
             additional_attrs: true
             type: dict