chore(deps): update container image tccr.io/truecharts/adminer to latest (#13519)

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

.all-contributorsrc

@@ -1937,6 +1937,141 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "K1Hyve",
+      "name": "Keyvan",
+      "avatar_url": "https://avatars.githubusercontent.com/u/53298451?v=4",
+      "profile": "https://github.com/K1Hyve",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "MickaelFontes",
+      "name": "MickaelFontes",
+      "avatar_url": "https://avatars.githubusercontent.com/u/81414455?v=4",
+      "profile": "https://github.com/MickaelFontes",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "blastik",
+      "name": "David CM",
+      "avatar_url": "https://avatars.githubusercontent.com/u/3662083?v=4",
+      "profile": "https://github.com/blastik",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "simon-hofmann",
+      "name": "Simon Hofman",
+      "avatar_url": "https://avatars.githubusercontent.com/u/23562420?v=4",
+      "profile": "https://github.com/simon-hofmann",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "notyouraveragegamer",
+      "name": "notyouraveragegamer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/104248676?v=4",
+      "profile": "https://github.com/NotYourAverageGamer",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "varac",
+      "name": "Varac",
+      "avatar_url": "https://avatars.githubusercontent.com/u/488213?v=4",
+      "profile": "https://www.varac.net",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "tuxpizza",
+      "name": "tuxsudo",
+      "avatar_url": "https://avatars.githubusercontent.com/u/84710786?v=4",
+      "profile": "https://tux.pizza",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "TylerRudie",
+      "name": "TylerRudie",
+      "avatar_url": "https://avatars.githubusercontent.com/u/2695916?v=4",
+      "profile": "https://github.com/TylerRudie",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "qnb59bny5x",
+      "name": "qnb59bny5x",
+      "avatar_url": "https://avatars.githubusercontent.com/u/108427982?v=4",
+      "profile": "https://github.com/qnb59bny5x",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "drndos",
+      "name": "Filip Bednárik",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5576134?v=4",
+      "profile": "https://blog.drndos.sk",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "sshcherbinin",
+      "name": "Serhii Shcherbinin",
+      "avatar_url": "https://avatars.githubusercontent.com/u/92396963?v=4",
+      "profile": "https://github.com/sshcherbinin",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "qraynaud",
+      "name": "Quentin Raynaud",
+      "avatar_url": "https://avatars.githubusercontent.com/u/65991?v=4",
+      "profile": "https://github.com/qraynaud",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "thegcat",
+      "name": "Felix Schäfer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/22835?v=4",
+      "profile": "http://fachschaften.org",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-207-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-222-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -402,6 +402,25 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/cedstrom"><img src="https://avatars.githubusercontent.com/u/6175957?v=4?s=100" width="100px;" alt="cedstrom"/><br /><sub><b>cedstrom</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=cedstrom" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/v3DJG6GL"><img src="https://avatars.githubusercontent.com/u/72495210?v=4?s=100" width="100px;" alt="v3DJG6GL"/><br /><sub><b>v3DJG6GL</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Av3DJG6GL" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/polarstack"><img src="https://avatars.githubusercontent.com/u/42521003?v=4?s=100" width="100px;" alt="polarstack"/><br /><sub><b>polarstack</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=polarstack" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/K1Hyve"><img src="https://avatars.githubusercontent.com/u/53298451?v=4?s=100" width="100px;" alt="Keyvan"/><br /><sub><b>Keyvan</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=K1Hyve" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/simon-hofmann"><img src="https://avatars.githubusercontent.com/u/23562420?v=4?s=100" width="100px;" alt="Simon Hofman"/><br /><sub><b>Simon Hofman</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=simon-hofmann" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/NotYourAverageGamer"><img src="https://avatars.githubusercontent.com/u/104248676?v=4?s=100" width="100px;" alt="notyouraveragegamer"/><br /><sub><b>notyouraveragegamer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=notyouraveragegamer" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://www.varac.net"><img src="https://avatars.githubusercontent.com/u/488213?v=4?s=100" width="100px;" alt="Varac"/><br /><sub><b>Varac</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=varac" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://tux.pizza"><img src="https://avatars.githubusercontent.com/u/84710786?v=4?s=100" width="100px;" alt="tuxsudo"/><br /><sub><b>tuxsudo</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=tuxpizza" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/TylerRudie"><img src="https://avatars.githubusercontent.com/u/2695916?v=4?s=100" width="100px;" alt="TylerRudie"/><br /><sub><b>TylerRudie</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=TylerRudie" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qnb59bny5x"><img src="https://avatars.githubusercontent.com/u/108427982?v=4?s=100" width="100px;" alt="qnb59bny5x"/><br /><sub><b>qnb59bny5x</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=qnb59bny5x" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://blog.drndos.sk"><img src="https://avatars.githubusercontent.com/u/5576134?v=4?s=100" width="100px;" alt="Filip Bednárik"/><br /><sub><b>Filip Bednárik</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adrndos" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/sshcherbinin"><img src="https://avatars.githubusercontent.com/u/92396963?v=4?s=100" width="100px;" alt="Serhii Shcherbinin"/><br /><sub><b>Serhii Shcherbinin</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sshcherbinin" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qraynaud"><img src="https://avatars.githubusercontent.com/u/65991?v=4?s=100" width="100px;" alt="Quentin Raynaud"/><br /><sub><b>Quentin Raynaud</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aqraynaud" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="http://fachschaften.org"><img src="https://avatars.githubusercontent.com/u/22835?v=4?s=100" width="100px;" alt="Felix Schäfer"/><br /><sub><b>Felix Schäfer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=thegcat" title="Documentation">📖</a></td>
     </tr>
   </tbody>
 </table>

.github/actions/collect-changes/action.yaml

@@ -50,7 +50,6 @@ runs:
         # Set output to changed charts
         echo "Changed charts: ${CHARTS[*]}"
         printf "::set-output name=addedOrModified::%s\n" "${CHARTS[*]}"
-        
 
     - name: Collect bumped charts after last tag
       id: filter-bumped-charts

.github/ct-install.yaml

@@ -12,21 +12,26 @@ chart-dirs:
 excluded-charts:
   - charts/dependency/subchart
   - charts/incubator/twingate-connector
+  - charts/incubator/docassemble
+  - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
-  - charts/incubator/tauticord
+  - charts/incubator/telepush
   - charts/library/common
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
   - charts/stable/amcrest2mqtt
+  - charts/stable/arksurvivalevolved
+  - charts/stable/tauticord
   - charts/stable/discordgsm
   - charts/stable/facebox
   - charts/stable/foundryvtt
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

.github/scripts/updateTraefikMiddlewareVersions.sh

@@ -1,53 +0,0 @@
-#! /bin/bash
-
-trainsPath="./charts"
-traefikTrain="enterprise"
-
-get_latest_release() {
-    # Get latest release from GitHub api, NOTE: Remove the header when running locally (or add a valid token)
-    curl --silent \
-         --header 'authorization: Bearer ${{ secrets.GITHUB_TOKEN }}' \
-         --url "https://api.github.com/repos/$1/releases/latest" |
-    # Get tag line
-    grep '"tag_name":' |
-    # Pluck JSON value
-    sed -E 's/.*"([^"]+)".*/\1/'
-}
-
-set_key_to_version() {
-    key="$1"
-    version="$2"
-    traefikValuesFile="$trainsPath/$traefikTrain/traefik/values.yaml"
-    echo "Setting $key to $version..."
-    sed -i "s/${key}: .*/${key}: ${version}/" $traefikValuesFile
-
-    content=$(grep "$key:" "$traefikValuesFile" | sed "s/\s*${key}:\s*//" )
-    echo "New content of $key in values.yaml: $content"
-    echo ""
-}
-
-update_plugin() {
-    repo="$1"
-    key="$2"
-    pluginName="$3"
-
-    version=$(get_latest_release "$repo")
-    if [ -z "$version" ]
-    then
-        echo "Got empty version, skipping..."
-    else
-        echo "Fetched $pluginName plugin version: $version"
-        set_key_to_version "$key" "$version"
-    fi;
-}
-# Example
-# update_plugin "repo" "key_holding_version_in_values.yaml" "plugin_name_used_for_verbose_printing_only"
-
-# Real IP
-update_plugin "soulbalz/traefik-real-ip" "realIPVersion" "RealIP"
-
-# Theme Park
-update_plugin "packruler/traefik-themepark" "themeParkVersion" "ThemePark"
-
-# GeoBlock
-update_plugin "PascalMinder/geoblock" "geoBlockVersion" "GeoBlock"

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -206,6 +206,10 @@ jobs:
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
                 cat charts/${train}/${chart}/Chart.yaml | yq .description -r >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
+                echo "## Chart Sources" >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
+                cat charts/${train}/${chart}/Chart.yaml | go-yq .sources -r >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
                 echo "## Available Documentation" >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
 
@@ -240,7 +244,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -127,7 +127,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -169,6 +169,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -185,7 +188,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -197,7 +200,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -231,6 +234,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -247,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -259,7 +265,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -293,6 +299,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -309,7 +318,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -321,7 +330,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -355,6 +364,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -371,7 +383,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -383,7 +395,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -417,6 +429,10 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
+
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
@@ -432,7 +448,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -444,7 +460,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -478,6 +494,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,12 +377,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
-      - uses: actions/setup-node@bea5baf987ba7aa777a8a0b4ace377a21c45c381 # v3
+      - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3
         with:
           node-version: 18
 

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -14,12 +14,12 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@23a02fe7be9e93f857a953cc8162e57d2c8401ef # v39.0.1
+        uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.7.4.5"
+appVersion: "23.8.3.48"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 7.0.3
+version: 7.0.11
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.7.4.5@sha256:2d52dece52908fc10565db7a5e8580606b4775ff164fb4bd0778f873cac58c5e
+  tag: v23.8.3.48@sha256:6dfb2322a26e5990b908cc3f49ceee230b241a67e791886ec76965df1a8aff11
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.9.2"
+appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.5
+version: 3.0.26
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.9.2@sha256:eb75397391d6eed8eee85da22a9cf595c4e3d9a52fdfc311f8cb629baf1f543b
+  tag: v2.10.0@sha256:538721a09681e1a5ee190cc348b7a27b0543eb2bade4afa4a2a89e21ca846f9d
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "11.0.2"
+appVersion: "11.0.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.6
+version: 9.0.29
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.2@sha256:b120463f63461cef87eaff1312378e6b99eb4a006176cf1707fc1590602dfb14
+  tag: v11.0.3@sha256:aeb1d81f269a5c37db7dcdc4dbcd221582f150f5ad15dc21893c6f63c46f5fbc
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.21"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.7
+version: 8.0.30
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:fc655c32727d371ba77d370203f2622dde3e90b23a69214ca2cdcb6156eaa376
+  tag: v1.6.21@sha256:66ac27883febf5687134c4c7c4724437174d704565a3bf5e8ea0038d2f9e7c7b
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.8"
+appVersion: "7.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.3
+version: 8.0.26
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.8@sha256:031136aedbbac60815dba3e87f4e270afb76fe3ab824946d57d4f9ba6bd6476f
+  tag: v7.0.2@sha256:6dd833c278dd211f6c8b5aa8cc32de2f886e53c347cb676cc8d8eb1e0de848f3
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.5
+version: 3.0.29
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:3d253e6a23403d74d9280d6bb964735b83a117edce2cc06c38f43ca96c9eb78d
+  tag: v1.6.1@sha256:c150064746d1155d557663650603ea428eacd22c40da62f2ec3078b4c2ade1ba
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.0.12"
+appVersion: "7.2.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.7
+version: 8.0.32
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.0.12@sha256:186cc9418acb87e02a24566a0abceb7c7be55912ff20d12cd226d438de479b1d
+  tag: v7.2.1@sha256:01e1cd968ac2fa89c5c9008d49e63531d843c396eebff62f910784cbe2873811
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.3.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.12
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.7
+version: 6.0.29
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:0116bf9df507776691e51d4968ab61403d932cd5ca58a61505709e4988d1bee6
+  tag: v9.3.0@sha256:6006fc17d23089aa2807b51eff894a5a1c90d2f1f0175714b6015da6137a6dd4
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.6
+    version: 8.0.29
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 home: https://truecharts.org/charts/enterprise/authelia
@@ -35,7 +35,7 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 18.0.0
+version: 19.0.3
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/docs/Setup-Guide.md

@@ -103,6 +103,7 @@ The last step is adding the `forwardauth` along with the standard `ingress` sett
 - In this example we use the same name as above, or `auth`. Click `Add` to the `Traefik Middlewares` section, and enter your `forwardauth` name.
 
 ![TraefikForwardAuthMiddleware](img/TraefikForwardAuthMiddleware.png)
+
 ### References
 
 The origin material for this guide is available on the [LLDAP Github](https://github.com/lldap/lldap). While further information on Authelia can be found on their [Github](https://github.com/authelia/authelia) and [website](https://www.authelia.com/).

charts/enterprise/authelia/questions.yaml

@@ -98,6 +98,95 @@ questions:
           schema:
             type: int
             default: 1
+  - variable: password_policy
+    group: "App Configuration"
+    label: "Password Policy Configuration"
+    description: "Authelia allows administrators to configure an enforced password policy."
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: enabled
+          label: "Enable"
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: standard
+                label: Standard
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: min_length
+                      label: "Minimum Password Length"
+                      description: "Minimum Password Length"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 8
+                    - variable: max_length
+                      label: "Max Passsword Length"
+                      description: "Max Password Length"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 0
+                    - variable: require_uppercase
+                      label: "Require Upppercase"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_lowercase
+                      label: "Require Lowercase"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_number
+                      label: "Require Numbers"
+                      description: "Require Numbers in the password"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+                        required: true
+                    - variable: require_special
+                      label: "Require Special Characters"
+                      schema:
+                        type: boolean
+                        default: false
+                        show_if: [["enabled", "=", true]]
+              - variable: zxcvbn
+                label: zxcvbn
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enabled
+                      schema:
+                        type: boolean
+                        default: false
+                        required: true
+                    - variable: min_score
+                      label: "Min Score"
+                      schema:
+                        type: int
+                        required: true
+                        show_if: [["enabled", "=", true]]
+                        default: 3
   - variable: duo_api
     group: "App Configuration"
     label: "DUO API Configuration"

charts/enterprise/authelia/templates/_configmap.tpl

@@ -62,6 +62,20 @@ data:
       issuer: {{ .Values.totp.issuer | default .Values.domain }}
       period: {{ .Values.totp.period | default 30 }}
       skew: {{ .Values.totp.skew | default 1 }}
+    {{- if .Values.password_policy.enabled }}
+    password_policy:
+      standard:
+        enabled: {{ .Values.password_policy.standard.enabled | default false }}
+        min_length: {{ .Values.password_policy.standard.min_length | default 8 }}
+        max_length: {{ .Values.password_policy.standard.max_length | default 0 }}
+        require_uppercase: {{ .Values.password_policy.standard.require_uppercase | default false }}
+        require_lowercase: {{ .Values.password_policy.standard.require_lowercase | default false }}
+        require_number: {{ .Values.password_policy.standard.require_number | default false }}
+        require_special: {{ .Values.password_policy.standard.require_special | default false }}
+      zxcvbn:
+        enabled: {{ .Values.password_policy.zxcvbn.enabled | default false }}
+        min_score: {{ .Values.password_policy.zxcvbn.min_score | default 3 }}
+    {{- end -}}
     {{- if .Values.duo_api.enabled }}
     duo_api:
       hostname: {{ .Values.duo_api.hostname }}
@@ -205,10 +219,10 @@ data:
         {{- with $notifier.smtp.username }}
         username: {{ . }}
         {{- end }}
-        sender: {{ $notifier.smtp.sender }}
-        identifier: {{ $notifier.smtp.identifier }}
+        sender: {{ $notifier.smtp.sender | quote }}
+        identifier: {{ $notifier.smtp.identifier | quote }}
         subject: {{ $notifier.smtp.subject | quote }}
-        startup_check_address: {{ $notifier.smtp.startup_check_address }}
+        startup_check_address: {{ $notifier.smtp.startup_check_address | quote }}
         disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
         disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
         tls:

charts/enterprise/authelia/values.yaml

@@ -117,6 +117,25 @@ totp:
   ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
   skew: 1
 
+##
+## Password Policy Config
+##
+## Parameters used for Password Policies
+password_policy:
+  ## See: https://www.authelia.com/configuration/security/password-policy/
+  standard:
+    enabled: false
+    min_length: 8
+    max_length: 0
+    require_uppercase: false
+    require_lowercase: false
+    require_number: false
+    require_special: false
+  zxcvbn:
+    ## See https://www.authelia.com/configuration/security/password-policy/#zxcvbn for more info
+    enabled: false
+    min_score: 3
+
 ##
 ## Duo Push API Configuration
 ##

charts/enterprise/blocky/Chart.yaml

@@ -1,13 +1,13 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.6
+    version: 8.0.29
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 8.0.0
+version: 9.0.1
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,12 +1,29 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive. Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default. They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS. You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above. This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/clusterissuer/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
   - https://cert-manager.io/
 type: application
-version: 4.0.1
+version: 4.1.2
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/clusterissuer/docs/how-to.md

@@ -14,7 +14,6 @@ It is important to configure Scale with reliable nameserver to avoid issues hand
 
 ![clusterissuer scale nameservers](img/scale-network-nameserver.png)
 
-
 ## Install clusterissuer App
 
 :::note
@@ -37,7 +36,7 @@ Login to Cloudflare dashboard and go to the [Cloudflare API Tokens](https://dash
 
 ![clusterissuer app card](img/cf-apitokens-template.png)
 
-The recommended  `API Token` permissions are below:
+The recommended `API Token` permissions are below:
 ![clusterissuer app card](img/cf-apitokens-perms.png)
 
 #### Cloudflare ACME Issuer Settings

charts/enterprise/clusterissuer/questions.yaml

@@ -47,6 +47,8 @@ questions:
                             description: rfc2136 (Advanced)
                           - value: HTTP01
                             description: HTTP01 (Experimental)
+                          - value: acmedns
+                            description: ACME DNS (Advanced)
                     - variable: server
                       label: Server
                       description: "Server for ACME, for example: letsencrypt"
@@ -195,7 +197,64 @@ questions:
                         type: string
                         required: true
                         default: ""
-
+                    - variable: acmednsHost
+                      label: ACME DNS host
+                      description: "ACME DNS API server address"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: string
+                        required: true
+                        default: "https://auth.acme-dns.io"
+                    - variable: acmednsConfig
+                      label: ACME DNS config
+                      description: "ACME DNS per-domain auth configuration"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: list
+                        default: []
+                        items:
+                          - variable: acmednsEntry
+                            label: 'ACME DNS entry'
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: domain
+                                  label: Domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: username
+                                  label: Username
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: password
+                                  label: Password
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: fulldomain
+                                  label: Full domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: subdomain
+                                  label: Subdomain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: allowFrom
+                                  label: Allow from
+                                  schema:
+                                    type: list
+                                    default: []
+                                    items:
+                                      - variable: cidr
+                                        label: CIDR
+                                        schema:
+                                          type: ipaddr
+                                          cidr: true
+                                          required: true
         - variable: CA
           label: Certificate Authority Issuer
           schema:

charts/enterprise/clusterissuer/templates/clusterissuer/_ACME.tpl

@@ -1,15 +1,31 @@
 {{- define "certmanager.clusterissuer.acme" -}}
 {{- $operator := index $.Values.operator "cert-manager" -}}
 {{- $namespace := $operator.namespace | default "cert-manager" -}}
+
+{{- $rfctsigSecret := .rfctsigSecret | default "" -}}
+{{/* https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/#troubleshooting */}}
+{{- if $rfctsigSecret -}} {{/* If we try to decode and fail, go on and encode it. */}}
+  {{- if (contains "illegal base64" (b64dec $rfctsigSecret)) -}}
+    {{- $rfctsigSecret = b64enc $rfctsigSecret -}}
+  {{- end -}}
+{{- end -}}
+
 {{- range .Values.clusterIssuer.ACME }}
-  {{- if not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name) -}}
+  {{- if or (not .name) (not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name)) -}}
     {{- fail "ACME - Expected name to be all lowercase with hyphens, but not start or end with a hyphen" -}}
   {{- end -}}
-  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" -}}
+  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" "acmedns" -}}
   {{- if not (mustHas .type $validTypes) -}}
     {{- fail (printf "Expected ACME type to be one of [%s], but got [%s]" (join ", " $validTypes) .type) -}}
   {{- end -}}
   {{- $issuerSecretName := printf "%s-clusterissuer-secret" .name }}
+  {{- $acmednsDict := dict -}}
+  {{- if and (eq .type "acmedns") (not .acmednsConfigJson) }}
+    {{- range .acmednsConfig }}
+      {{/* Transform to a dict with domain as a key, also remove domain from the dict */}}
+      {{- $_ := set $acmednsDict .domain (omit . "domain") -}}
+    {{- end }}
+  {{- end -}}
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
@@ -76,6 +92,12 @@ spec:
           tsigSecretSecretRef:
             name: {{ $issuerSecretName }}
             key: rfctsigSecret
+      {{- else if eq .type "acmedns" }}
+        acmeDNS:
+          host: {{ .acmednsHost }}
+          accountSecretRef:
+            name: {{ $issuerSecretName }}
+            key: acmednsJson
       {{- end -}}
     {{- end }}
 ---
@@ -93,6 +115,11 @@ stringData:
   akclientSecret: {{ .akclientSecret | default "" }}
   akaccessToken: {{ .akaccessToken | default "" }}
   doaccessToken: {{ .doaccessToken | default "" }}
-  rfctsigSecret: {{ .rfctsigSecret | default "" }}
-{{- end }}
+  rfctsigSecret: {{ $rfctsigSecret }}
+{{- if .acmednsConfigJson }}
+  acmednsJson: {{ .acmednsConfigJson }}
+{{- else if $acmednsDict }}
+  acmednsJson: {{ toJson $acmednsDict }}
+{{- end -}}
+  {{- end -}}
 {{- end -}}

charts/enterprise/clusterissuer/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:3bf74a004e49495307bf61ade401ccde159ce5f3930992ec42e747877df5d558
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true
@@ -59,7 +59,7 @@ clusterIssuer:
 #     # Used primarily for the SCALE GUI
 #     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
 #     email: ""
-#     # Options: HTTP01, cloudflare, route53
+#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
 #     type: ""
 #     # for cloudflare
 #     cfapikey: ""
@@ -82,3 +82,15 @@ clusterIssuer:
 #     tsigKeyName: ""
 #     tsigAlgorithm: ""
 #     rfctsigSecret: ""
+#     # for acmedns
+#     name: sd
+#     acmednsHost: asdf
+#     # Pick one of the bellow acmednsConfig
+#     acmednsConfigJson:
+#     acmednsConfig:
+#       - domain: ""
+#         username: ""
+#         password: ""
+#         fulldomain: ""
+#         subdomain: ""
+#         allowFrom: []

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.0.3"
+appVersion: "10.1.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.4
+version: 9.0.26
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.0.3@sha256:2e59eea99682231d1766062f50b8e4da0b04f2620126befc836e7297de863af6
+  tag: v10.1.4@sha256:5f1b6a54159762bbe2912502f36088914bc389d0769bfe3cea89ae2d99a11a39
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/metallb-config/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -22,7 +22,7 @@ sources:
   - https://github.com/metallb/metallb
   - https://metallb.universe.tf
 type: application
-version: 3.0.0
+version: 3.0.3
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/metallb-config/docs/setup-guide.md

@@ -4,7 +4,7 @@ The guide walks through a basic configuration of MetalLB for a single address po
 
 :::warning
 
-With MetalLB installed, apps will not be reachable using the integrated loadbalancer. You cannot combine two different loadbalancers in TrueNAS SCALE.
+With MetalLB installed, apps will not be reachable using the integrated LoadBalancer. You cannot combine two different LoadBalancers in TrueNAS SCALE.
 
 :::
 
@@ -14,6 +14,12 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 
 ![metallb-addtrains](img/metallb_guide_trains.png)
 
+:::caution
+
+Our customized version of MetalLB is only intended for use with other TrueCharts applications. Other catalogs will likely not support our MetalLB application. MetalLB could technically work with TrueNAS catalog apps if they used the LoadBalancer service, but they don't as they use NodePort instead. These atypical configurations aren't officially supported nor encouraged by TrueCharts.
+
+:::
+
 ## 1. Install MetalLB Operator from Operators Train
 
 ![metallb-apps](img/metallb_guide_apps.png)
@@ -21,7 +27,7 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 Install `metallb` from `operators` train first. There is no config, so just hit save.
 
 If you encounter an error upon install, run the following command as root from system settings -> shell and attempt the install again:
-```k3s kubectl delete  --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete```
+`k3s kubectl delete --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete`
 
 If you previously had `metallb` installed and encounter an error, delete the old version, then run the above command before proceeding to install the `metallb` operator.
 
@@ -57,21 +63,21 @@ Once installed, `metallb-config` will always show as Stopped.
 
 ![metallb-specifyIP](img/metallb_guide_specifyIP.png)
 
-With MetalLB installed, its is recommended (but optional) to specify IP addresses for your apps.
+With MetalLB installed, it's recommended (but optional) to specify IP addresses for your apps.
 
 For each app, under **Networking and Services**, select `LoadBalancer` Service Type for the Main Service.
 
 In the **LoadBalancer IP** field, specify an IP address that is within the MetalLB address pool that you configured. Apply the same IP address to the **LoadBalancer IP** field on other services within the app.
 
-## 4. Disable SCALE's Default Loadbalancer
+## 4. Disable SCALE's Default LoadBalancer
 
-With MetalLB installed and configured, you must now disable SCALE's default loadbalancer.
+With MetalLB installed and configured, you must now disable SCALE's default LoadBalancer.
 
 In the SCALE UI, under **Apps** > **Settings** > **Advanced Settings**
 
 ![metallb-disable](img/metallb_guide_disableLB.png)
 
-Uncheck `Enable Integrated Loadbalancer`.
+Uncheck `Enable Integrated LoadBalancer`.
 
 **This will trigger a restart of Kubernetes and all apps**. After roughly 5-10 minutes, your apps will redeploy using the MetalLB-assigned IP addresses.
 

charts/enterprise/metallb-config/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:3bf74a004e49495307bf61ade401ccde159ce5f3930992ec42e747877df5d558
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: false
@@ -26,7 +26,7 @@ service:
       main:
         enabled: false
         port: 9999
-        
+
 operator:
   verify:
     enabled: true

charts/enterprise/prometheus/Chart.yaml

@@ -1,17 +1,17 @@
 apiVersion: v2
-appVersion: "2.46.0"
+appVersion: "2.47.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: exporters.enabled,exporters.node-exporter.enabled
     name: node-exporter
     repository: https://deps.truecharts.org
-    version: 2.0.7
+    version: 3.0.25
   - condition: exporters.enabled,exporters.kube-state-metrics.enabled
     name: kube-state-metrics
     repository: https://deps.truecharts.org
-    version: 2.0.6
+    version: 3.0.23
 deprecated: false
 description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/prometheus.png
@@ -29,7 +29,7 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 12.1.0
+version: 13.0.7
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/prometheus/questions.yaml

@@ -101,23 +101,24 @@ questions:
                               default: ""
                           - variable: basicAuth
                             label: Basic Auth
-                            type: dict
                             description: Basic authentication for remote write
-                            attrs:
-                              - variable: username
-                                label: Username
-                                description: Basic auth username
-                                schema:
-                                  type: string
-                                  required: true
-                                  default: ""
-                              - variable: password
-                                label: Password
-                                description: Basic auth password
-                                schema:
-                                  type: string
-                                  required: false
-                                  default: ""
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: username
+                                  label: Username
+                                  description: Basic auth username
+                                  schema:
+                                    type: string
+                                    required: true
+                                    default: ""
+                                - variable: password
+                                  label: Password
+                                  description: Basic auth password
+                                  schema:
+                                    type: string
+                                    required: false
+                                    default: ""
 
   - variable: exporters
     group: "App Configuration"

charts/enterprise/prometheus/templates/prometheus/_prometheus.tpl

@@ -126,8 +126,9 @@ spec:
   {{- if .Values.prometheus.remoteRead }}
   remoteRead: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteRead "context" $) | nindent 4 }}
   {{- end }}
-  {{- if .Values.prometheus.remoteWrite }}
-  remoteWrite: {{- include "tc.v1.common.tplvalues.render" (dict "value" .Values.prometheus.remoteWrite "context" $) | nindent 4 }}
+  {{- with .Values.prometheus.remoteWrite }}
+  remoteWrite:
+    {{- tpl (toYaml .) $ | nindent 4 }}
   {{- end }}
   {{- if .Values.prometheus.podSecurityContext.enabled }}
   securityContext: {{- omit .Values.prometheus.podSecurityContext "enabled" | toYaml | nindent 4 }}

charts/enterprise/prometheus/values.yaml

@@ -1,16 +1,15 @@
 image:
   repository: tccr.io/truecharts/prometheus
-  tag: v2.46.0@sha256:0b0dc821c06967e8562bf32ebd9055eef7f1ddd8851187acbf8871d8bd9c72a3
+  tag: v2.47.1@sha256:82f231253e159e8d5504f2c1a67fa5b82eb005d7902ffd4d0ed32546b30c3d72
 
 thanosImage:
   repository: tccr.io/truecharts/thanos
-  tag: 0.31.0@sha256:28282d3e63f84cdeeb05e965b173b610d5597997acc7ce75d5849207b0f97b28
+  tag: v0.32.4@sha256:48af596fa350c6889e102249523fd4da6ab926ba6fcfbe0b1dcac1c5e8a2bec0
 
 alertmanagerImage:
   repository: tccr.io/truecharts/alertmanager
-  tag: 0.25.0@sha256:6b534671b83aa7fbd91d1b10bf0f1b29b948e4b300f8359a86043d0deba07207
-manifestManager:
-  enabled: true
+  tag: v0.26.0@sha256:75279c577a514e90854126ba950cf7afaeac43eda85405fba394658b17ca0a6f
+
 global:
   labels: {}
 workload:

charts/enterprise/traefik/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2.10.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Traefik is a flexible reverse proxy and Ingress Provider.
 home: https://truecharts.org/charts/enterprise/traefik
@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 21.0.0
+version: 21.0.7
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/traefik/docs/Authelia-LLDAP-forwardauth.md

@@ -1,3 +1,3 @@
 # Authelia + LLDAP + Traefik ForwardAuth Setup guide
 
-Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`. 
+Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`.

charts/enterprise/traefik/templates/_args.tpl

@@ -173,9 +173,14 @@ args:
   {{/* End of GeoBlock */}}
   {{/* RealIP */}}
   {{- if .Values.middlewares.realIP }}
-  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/soulbalz/traefik-real-ip"
+  - "--experimental.localPlugins.traefik-real-ip.modulename=github.com/jramsgz/traefik-real-ip"
   {{- end }}
   {{/* End of RealIP */}}
+  {{/* ModSecurity */}}
+  {{- if .Values.middlewares.modsecurity }}
+  - "--experimental.localPlugins.traefik-modsecurity-plugin.modulename=github.com/acouvreur/traefik-modsecurity-plugin"
+  {{- end }}
+  {{/* End of ModSecurity */}}
   {{- with .Values.additionalArguments }}
   {{- range . }}
   - {{ . | quote }}

charts/enterprise/traefik/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/traefik
-  tag: 2.10.4@sha256:028687caa7680c6189c52a6dd28ffd17c3d0a747885ad83b3027fa74023a0fec
+  tag: 2.10.4@sha256:77766fb3eb739197d7e229bfa8afb3a4a740886e3effef474ca4c9efdf65e5ab
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.29.1"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Unofficial Bitwarden compatible server written in Rust
 home: https://truecharts.org/charts/enterprise/vaultwarden
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 22.0.0
+version: 23.0.2
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: v1.29.1@sha256:5a670aee4b1a57a5a414607f9222f558ab365625f64ff78885f7776971c95b54
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain
@@ -126,7 +126,7 @@ vaultwarden:
   push:
     enabled: false
     # installationId:
-    # installationKey: 
+    # installationKey:
 
   ## Logging options. https://github.com/dani-garcia/bitwarden_rs/wiki/Logging
   log:

charts/incubator/arksurvivalevolved/templates/common.yaml

@@ -1,16 +0,0 @@
-{{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
-
-{{- if ne (int .Values.service.udp2.ports.udp2.port) (add1 (int .Values.service.main.ports.main.port)) -}}
-  {{- fail (printf "In the service udp2, the port for udp2 must be greater by 1 than the main service's port. You have to set it to <%s>." (add1 .Values.service.main.ports.main.port)) }}
-{{- end -}}
-
-{{- if and (ge (int .Values.service.udpsteam.ports.udpsteam.port) 27020) (le (int .Values.service.udpsteam.ports.udpsteam.port) 27050) -}}
-  {{- fail "UDP Steam Service port cannot be between 27020 and 27050." -}}
-{{- end }}
-
-{{/* Render secret */}}
-{{- include "ark.secret" . }}
-
-{{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}

charts/incubator/arksurvivalevolved/values.yaml

@@ -1,83 +0,0 @@
-image:
-  pullPolicy: IfNotPresent
-  repository: tccr.io/truecharts/arksurvivalevolved
-  tag: latest@sha256:6c3c2c8ce43c350b88e93943eb99265499680011f2eb5b912652e226a19bd47c
-
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
-securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
-
-ark:
-  srv_admin_pass: ""
-  srv_password: ""
-  username: ""
-  password: ""
-  game_id: "376030"
-  rcon_enabled: true
-  game_params: []
-  game_params_extra: []
-  easy_game_extra_params:
-    server: true
-    log: true
-    crossplay: true
-  map: TheIsland
-  # Used only for SCALE GUI
-  custom_map: ""
-  server_name: ""
-  validate: false
-
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-  readiness:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-  startup:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-
-service:
-  main:
-    ports:
-      main:
-        port: 7777
-        protocol: UDP
-  udp2:
-    enabled: true
-    ports:
-      udp2:
-        enabled: true
-        # This should always be main +1
-        port: 7778
-        protocol: UDP
-  udpsteam:
-    enabled: true
-    ports:
-      udpsteam:
-        enabled: true
-        port: 27015
-        protocol: UDP
-  rcontcp:
-    enabled: true
-    ports:
-      rcontcp:
-        enabled: true
-        port: 27020
-        protocol: TCP
-
-persistence:
-  serverfiles:
-    enabled: true
-    mountPath: /serverdata/serverfiles
-  steamcmd:
-    enabled: true
-    mountPath: /serverdata/steamcmd
-
-portal:
-  enabled: true

charts/incubator/automatic-ripping-machine/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "2.6.60"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.9
+deprecated: false
+description: Automatic Ripping Machine (ARM) Scripts.
+home: https://truecharts.org/charts/incubator/automatic-ripping-machine
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/automatic-ripping-machine.png
+keywords:
+  - automatic-ripping-machine
+  - media
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: automatic-ripping-machine
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/automatic-ripping-machine
+  - https://github.com/automatic-ripping-machine/automatic-ripping-machine
+type: application
+version: 0.0.2
+annotations:
+  truecharts.org/catagories: |
+    - media
+  truecharts.org/SCALE-support: "true"

charts/incubator/automatic-ripping-machine/docs/default_credentials.md

@@ -0,0 +1,4 @@
+# Default Credentials
+
+- Username: `admin`
+- Password: `password`

charts/incubator/automatic-ripping-machine/docs/installation_notes.md

@@ -0,0 +1,23 @@
+# Installation Notes
+
+Installation notes and warnings for A.R.M
+
+:::warning
+
+This app uses advanced privileges aka "GOD MODE" on the host
+
+:::
+
+Configure the app and storage.
+
+Mount your dvd with host and container path : `/dev/sr0`.
+
+Do the same for all DVD burners you want to mount.
+
+- `/dev/sr0`
+- `/dev/sr1`
+- `/dev/sr2`
+- `/dev/sr3`
+- `/dev/sr4`
+
+![dvd-mount](./imgs/dvd-mount.png)

charts/incubator/automatic-ripping-machine/questions.yaml

@@ -0,0 +1,100 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+
+
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+# Include{containerConfig}
+# Include{podOptions}
+# Include{serviceRoot}
+# Include{serviceMain}
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: "Main Service Port Configuration"
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
+                            schema:
+                              type: int
+                              default: 10683
+                              required: true
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: arm
+          label: "App Arm Storage"
+          description: "Stores the Application Arm."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: "Main Ingress"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressAdvanced}
+# Include{ingressList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/incubator/automatic-ripping-machine/values.yaml

@@ -0,0 +1,42 @@
+image:
+  repository: tccr.io/truecharts/automatic-ripping-machine
+  pullPolicy: IfNotPresent
+  tag: v2.6.60@sha256:80794ea2bcf0372856f83c980ee65f26eacd3253b9c97215e686fb85e2df969b
+
+securityContext:
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+    allowPrivilegeEscalation: true
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        targetPort: 8080
+        port: 10683
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            # default media perms
+            ARM_UID: "{{ .Values.securityContext.container.PUID }}"
+            ARM_GID: "{{ .Values.securityContext.pod.fsGroup }}"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: "/etc/arm/config"
+  arm:
+    enabled: true
+    mountPath: "/home/arm"
+
+portal:
+  open:
+    enabled: true

charts/incubator/backuppc/Chart.yaml

@@ -1,16 +1,11 @@
-annotations:
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Backup
-    - Network-Web
 apiVersion: v2
-appVersion: "latest"
+appVersion: "6.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.9
 deprecated: false
-description: BackupPC is a high-performance, enterprise-grade system for backing up Linux, Windows and macOS PCs and laptops to a server's disk.
+description: A high-performance, enterprise-grade system for backing up Linux, Windows and macOS PCs and laptops to a server's disk.
 home: https://truecharts.org/charts/incubator/backuppc
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/backuppc.png
 keywords:
@@ -25,6 +20,12 @@ maintainers:
 name: backuppc
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/backuppc
+  - https://github.com/tiredofit/docker-backuppc
   - https://backuppc.github.io/backuppc/index.html
 type: application
-version: 2.0.16
+version: 3.0.1
+annotations:
+  truecharts.org/catagories: |
+    - Backup
+    - Network-Web
+  truecharts.org/SCALE-support: "true"

charts/incubator/backuppc/questions.yaml

@@ -10,9 +10,84 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
+  - variable: backuppc
+    group: App Configuration
+    label: Backup PC
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: smtp
+          label: SMTP Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: auto_from
+                label: Auto From
+                description: Add setting to support sending through Gmail SMTP.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: host
+                label: SMTP Host
+                schema:
+                  type: string
+                  default: ""
+              - variable: port
+                label: SMTP Port
+                schema:
+                  type: int
+                  default: 25
+              - variable: domain
+                label: HELO Domain
+                schema:
+                  type: string
+                  default: ""
+              - variable: maildomain
+                label: Mail Domain From.
+                schema:
+                  type: string
+                  default: ""
+              - variable: auth
+                label: SMTP Authentication
+                schema:
+                  type: string
+                  default: "NONE"
+              - variable: user
+                label: SMTP Username
+                schema:
+                  type: string
+                  default: ""
+              - variable: pass
+                label: SMTP Password
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: tls
+                label: TLS
+                description: Use TLS.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: starttls
+                label: StartTLS
+                description:     Start TLS from within session.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: tlscertcheck
+                label: TLS Cert Check
+                description: Check remote certificate.
+                schema:
+                  type: boolean
+                  default: false
+
 # Include{containerConfig}
 # Include{serviceRoot}
         - variable: main
@@ -41,33 +116,33 @@ questions:
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: backuplocation
-          label: "backuplocation Storage"
-          description: "Backup Location"
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: configurationfiles
-          label: "configurationfiles Storage"
-          description: "Configuration Files"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{persistenceBasic}
-        - variable: homedirectory
-          label: "homedirectory Storage"
-          description: "Home Directory for Backuppc (SSH Keys)"
+        - variable: ssh
+          label: "App SSH Storage"
+          description: "Stores the Application SSH."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
         - variable: logs
-          label: "logs Storage"
-          description: "Logs"
+          label: "App Logs Storage"
+          description: "Stores the Application Logs."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: data
+          label: "App Data Storage"
+          description: "Stores the Application Data."
           schema:
             additional_attrs: true
             type: dict
@@ -96,7 +171,7 @@ questions:
                   default: 0
               - variable: runAsGroup
                 label: "runAsGroup"
-                description: "The groupID of the user running the application"
+                description: "The groupID this App of the user running the application"
                 schema:
                   type: int
                   default: 0

charts/incubator/backuppc/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/backuppc/values.yaml

@@ -1,34 +1,76 @@
-env: {}
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/backuppc
-  tag: latest@sha256:299db42e6562324141408027763266510dfec1d81a6af2e0aa6368bca498872d
-persistence:
-  backuplocation:
-    enabled: true
-    mountPath: /var/lib/backuppc
-  configurationfiles:
-    enabled: true
-    mountPath: /etc/backuppc
-  homedirectory:
-    enabled: true
-    mountPath: /home/backuppc
-  logs:
-    enabled: true
-    mountPath: /www/logs
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
+  tag: v6.0.2@sha256:80fe126415f0b530dd7d2645da23c8409f62f184a018c52a3ec1d8c5237d30ff
+
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+
 service:
   main:
     ports:
       main:
-        port: 8000
-        protocol: TCP
+        protocol: http
         targetPort: 80
+        port: 8000
+
+backuppc:
+  smtp:
+    auto_from: false
+    host: postfix-relay
+    port: 25
+    domain: docker
+    maildomain: local
+    auth: none
+    user: ""
+    pass: ""
+    tls: false
+    starttls: false
+    tlscertcheck: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            USER_BACKUPPC: "{{ .Values.securityContext.container.PUID }}"
+            GROUP_BACKUPPC: "{{ .Values.securityContext.pod.fsGroup }}"
+            CONFIG_PATH: "{{ .Values.persistence.config.mountPath }}"
+            LOG_PATH: "{{ .Values.persistence.logs.mountPath }}"
+            SSH_KEYS_PATH: "{{ .Values.persistence.ssh.mountPath }}"
+            DATA_PATH: "{{ .Values.persistence.data.mountPath }}"
+            # SMTP
+            SMTP_AUTO_FROM: "{{ .Values.backuppc.smtp.auto_from }}"
+            SMTP_HOST: "{{ .Values.backuppc.smtp.host }}"
+            SMTP_PORT: "{{ .Values.backuppc.smtp.port }}"
+            SMTP_DOMAIN: "{{ .Values.backuppc.smtp.domain }}"
+            SMTP_MAILDOMAIN: "{{ .Values.backuppc.smtp.maildomain }}"
+            SMTP_AUTHENTICATION: "{{ .Values.backuppc.smtp.auth }}"
+            SMTP_USER: "{{ .Values.backuppc.smtp.user }}"
+            SMTP_PASS: "{{ .Values.backuppc.smtp.pass }}"
+            SMTP_TLS: "{{ .Values.backuppc.smtp.tls }}"
+            SMTP_STARTTLS: "{{ .Values.backuppc.smtp.starttls }}"
+            SMTP_TLSCERTCHECK: "{{ .Values.backuppc.smtp.tlscertcheck }}"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: /config
+  ssh:
+    enabled: true
+    mountPath: /.ssh
+  logs:
+    enabled: true
+    mountPath: /logs
+  data:
+    enabled: true
+    mountPath: /data
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/ctfd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "3.5.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: mariadb.enabled
     name: mariadb
     repository: https://deps.truecharts.org/
@@ -29,7 +29,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/ctfd
   - https://github.com/CTFd/CTFd
 type: application
-version: 0.0.1
+version: 0.0.2
 annotations:
   truecharts.org/catagories: |
     - learning

charts/incubator/docassemble/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "latest"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.9
+deprecated: false
+description: A free, open-source expert system for guided interviews and document assembly.
+home: https://truecharts.org/charts/incubator/docassemble
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/docassemble.png
+keywords:
+  - docassemble
+  - documentation
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: docassemble
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/docassemble
+  - https://github.com/jhpyle/docassemble
+type: application
+version: 0.0.3
+annotations:
+  truecharts.org/catagories: |
+    - documentation
+  truecharts.org/SCALE-support: "true"

charts/incubator/docassemble/questions.yaml

@@ -10,45 +10,33 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
+  - variable: docassemble
+    group: App Configuration
+    label: Docassemble
     schema:
       additional_attrs: true
       type: dict
       attrs:
-        - variable: WINEPREFIX
-          label: "WINEPREFIX"
+        - variable: hostname
+          label: HostName
           schema:
             type: string
-            default: "/root/server"
-        - variable: WINEARCH
-          label: "WINEARCH"
+            required: true
+            default: "http://localhost:10685"
+        - variable: behind_loadbalancer
+          label: Behind LoadBalancer
           schema:
-            type: string
-            default: "win64"
-        - variable: WINEDEBUG
-          label: "WINEDEBUG"
-          schema:
-            type: string
-            default: "-all"
-        - variable: APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE
-          label: "APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE"
-          schema:
-            type: string
-            default: "1"
+            type: boolean
+            default: false
+
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
@@ -62,35 +50,47 @@ questions:
                             description: "This port exposes the container port on the service"
                             schema:
                               type: int
-                              default: 27017
+                              default: 10685
                               required: true
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: steamcmd
-          label: "steamcmd Storage"
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: serverfiles
-          label: "serverfiles Storage"
+        - variable: webapp
+          label: "App Web App Storage"
+          description: "Stores the Application Web App."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: savegame
-          label: "savegame Storage"
+        - variable: log
+          label: "App Log Storage"
+          description: "Stores the Application Log."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: serverconfig
-          label: "serverconfig Storage"
+        - variable: backup
+          label: "App Backup Storage"
+          description: "Stores the Application Backup."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: files
+          label: "App Files Storage"
+          description: "Stores the Application Files."
           schema:
             additional_attrs: true
             type: dict
@@ -116,13 +116,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/docassemble/values.yaml

@@ -0,0 +1,79 @@
+image:
+  repository: tccr.io/truecharts/docassemble
+  pullPolicy: IfNotPresent
+  tag: latest@sha256:665fbaf35a7548e0418947a8d1e193416fffd0a8a738cb2603310137a6fd16d1
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 10685
+  rcon:
+    enabled: true
+    ports:
+      rcon:
+        enabled: true
+        port: 25575
+
+docassemble:
+  hostname: docassemble.example.com
+  behind_loadbalancer: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              path: "/health_check"
+              type: http
+            readiness:
+              path: "/health_check"
+              type: http
+            startup:
+              path: "/health_check"
+              type: http
+          env:
+            DBNAME: "{{ .Values.cnpg.main.database  }}"
+            DBUSER: "{{ .Values.cnpg.main.user }}"
+            DBPASSWORD:
+              secretKeyRef:
+                name: cnpg-main-user
+                key: password
+            DBHOST:
+              secretKeyRef:
+                name: cnpg-main-urls
+                key: host
+            PORT: "{{ .Values.service.main.ports.main.port }}"
+            BEHINDHTTPSLOADBALANCER: "{{ .Values.docassemble.behind_loadbalancer }}"
+            DAHOSTNAME: "{{ .Values.docassemble.hostname }}"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: "/usr/share/docassemble/config"
+  webapp:
+    enabled: true
+    mountPath: "/usr/share/docassemble/webapp"
+  log:
+    enabled: true
+    mountPath: "/usr/share/docassemble/log"
+  backup:
+    enabled: true
+    mountPath: "/usr/share/docassemble/backup"
+  files:
+    enabled: true
+    mountPath: "/usr/share/docassemble/files"
+
+# Enabled postgres
+cnpg:
+  main:
+    enabled: true
+    user: docassemble
+    database: docassemble
+
+portal:
+  open:
+    enabled: true

charts/incubator/eco/Chart.yaml

@@ -1,15 +1,11 @@
-annotations:
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - GameServers
 apiVersion: v2
 appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.9
 deprecated: false
-description: "This Chart will download and install SteamCMD. It will also install ECO and run it."
+description: A custom SteamCMD chart that runs ECO.
 home: https://truecharts.org/charts/incubator/eco
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/eco.png
 keywords:
@@ -23,6 +19,10 @@ maintainers:
 name: eco
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/eco
-  - https://www.steampowered.com/
+  - https://github.com/ich777/docker-steamcmd-server/tree/eco
 type: application
-version: 2.0.8
+version: 3.1.2
+annotations:
+  truecharts.org/catagories: |
+    - games
+  truecharts.org/SCALE-support: "true"

charts/incubator/eco/questions.yaml

@@ -10,71 +10,150 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: secretEnv
-    group: "App Configuration"
-    label: "Image Secrets"
+  - variable: eco
+    group: App Configuration
+    label: Eco
     schema:
       additional_attrs: true
       type: dict
       attrs:
-        - variable: USERNAME
-          label: "USERNAME"
-          description: "Your Steam username goes here if you want to install a game that needs a valid account, otherwise leave it blank (ATTENTION You have to disable Steam Guard)."
+        - variable: game
+          label: Game Configuration
           schema:
-            type: string
-            default: ""
-        - variable: PASSWRD
-          label: "PASSWRD"
-          description: "Your Steam password goes here if you want to install a game that needs a valid account, otherwise leave it blank (ATTENTION You have to disable Steam Guard)."
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: id
+                label: Game Id
+                description: The ID of the container to download at start up.
+                schema:
+                  type: string
+                  required: true
+                  default: "739590"
+              - variable: user
+                label: Steam User
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: password
+                label: Steam Password
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: validate
+                label: Validate
+                description: Validates the game data.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: params
+                label: Game Params
+                schema:
+                  type: list
+                  default: []
+                  required: true
+                  items:
+                    - variable: param
+                      label: Param
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+        - variable: network
+          label: Network Configuration
           schema:
-            type: string
-            private: true
-            default: ""
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
-    schema:
-      additional_attrs: true
-      type: dict
-      attrs:
-        - variable: GAME_ID
-          label: "GAME_ID"
-          description: "The GAME_ID that the container download at startup.(https://developer.valvesoftware.com/wiki/Dedicated_Servers_List)"
-          schema:
-            type: string
-            default: "739590"
-        - variable: GAME_PARAMS
-          label: "GAME_PARAMS"
-          description: "Enter your start up commands for the server."
-          schema:
-            type: string
-            default: ""
-        - variable: VALIDATE
-          label: "VALIDATE"
-          description: "Set the Variable to true if you want to validate the installation otherwise leave it blank."
-          schema:
-            type: boolean
-            default: true
-        - variable: DATA_PERM
-          label: "DATA_PERM"
-          description: "Container Variable DATAPERM"
-          schema:
-            type: string
-            default: "770"
-        - variable: UMASK
-          label: "UMASK"
-          description: "Container Variable UMASK"
-          schema:
-            type: string
-            default: "000"
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: PublicServer
+                label: Public Server
+                description: Defines if other players can see server.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: Playtime
+                label: Play time
+                schema:
+                  type: string
+                  default: ""
+              - variable: DiscordAddress
+                label: Discord Address
+                description: Invite link ID for a Discord server.
+                schema:
+                  type: string
+                  default: ""
+              - variable: Password
+                label: Password
+                description: Defines if a server's password.
+                schema:
+                  type: string
+                  default: ""
+              - variable: Description
+                label: Server Name
+                description: Defines the name of the server.
+                schema:
+                  type: string
+                  default: "Truecharts ECO Server"
+              - variable: DetailedDescription
+                label: Detailed Description
+                description: Defines the server's description.
+                schema:
+                  type: string
+                  default: "Vanilla ECO game"
+              - variable: ServerCategory
+                label: Server Category
+                description: Set the server Category.
+                schema:
+                  type: string
+                  default: "None"
+                  enum:
+                    - value: None
+                      description: None
+                    - value: Beginner
+                      description: Beginner
+                    - value: Established
+                      description: Established
+                    - value: BeginnerHard
+                      description: BeginnerHard
+                    - value: Strange
+                      description: Strange
+              - variable: RemoteAddress
+                label: Remote Address
+                description: Public/external IP-address or domain and port number needed to reach the server.
+                schema:
+                  type: string
+                  default: "localhost:3000/"
+              - variable: WebServerUrl
+                label: Web Server Url
+                description: Public/external web sever URL.
+                schema:
+                  type: string
+                  default: "localhost:3001"
+              - variable: Rate
+                label: Rate
+                description: The network rate used to communicate between server and client.
+                schema:
+                  type: int
+                  default: 20
+              - variable: MaxConnections
+                label: Max Connections
+                description: Maximum number of concurrent players (-1 no limits).
+                schema:
+                  type: int
+                  default: -1
+
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
         - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
+          label: Main Service
+          description: The Primary service on which the Minecraft Server runs on
           schema:
             additional_attrs: true
             type: dict
@@ -82,36 +161,36 @@ questions:
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
-                      label: "Main Service Port Configuration"
+                      label: Main Service Port Configuration
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
+                            label: Port
+                            description: This port exposes the container port on the service
                             schema:
                               type: int
                               default: 3001
                               required: true
-        - variable: udpgameport
-          label: 'udpgameport service'
-          description: "UDP Game Port"
+        - variable: game
+          label: Game Service
+          description: The Game service.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
-                    - variable: udpgameport
-                      label: "udpgameport Service Port Configuration"
+                    - variable: game
+                      label: Game Service Port Configuration
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
+                            label: Port
+                            description: This port exposes the container port on the service
                             schema:
                               type: int
                               default: 3000
@@ -121,16 +200,16 @@ questions:
 # Include{serviceList}
 # Include{persistenceRoot}
         - variable: steamcmd
-          label: "steamcmd Storage"
-          description: "Container Path serverdatasteamcmd"
+          label: App SteamCMD Storage
+          description: Stores the Application SteamCMD.
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
         - variable: serverfiles
-          label: "serverfiles Storage"
-          description: "Container Path serverdataserverfiles"
+          label: App Server Files Storage
+          description: Stores the Application Server Files.
           schema:
             additional_attrs: true
             type: dict
@@ -139,7 +218,7 @@ questions:
 # Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
-          label: "Main Ingress"
+          label: Main Ingress
           schema:
             additional_attrs: true
             type: dict

charts/incubator/eco/templates/_configmap.tpl

@@ -0,0 +1,12 @@
+{{/* Define the configmap */}}
+{{- define "eco.configmaps" -}}
+
+{{- $network := .Values.eco.network -}}
+
+eco-network:
+  enabled: true
+  data:
+    Network.eco: |
+      {{ $network | toJson }}
+
+{{- end -}}

charts/incubator/eco/templates/common.yaml

@@ -1,2 +1,11 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . -}}
+
+{{/* Render configmaps for all pods */}}
+{{- $configmaps := include "eco.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+  {{- $_ := mustMergeOverwrite .Values.configmap $configmaps -}}
+{{- end -}}
+
 {{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{- include "tc.v1.common.loader.apply" . -}}

charts/incubator/eco/values.yaml

@@ -1,49 +1,94 @@
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/eco
-  tag: latest@sha256:7b380486ce590ba0bb9b3361f84464727126611771ba746210f7a73180d7b987
-
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
+  tag: latest@sha256:b68c9690ea433e1d94363ebf5384342652ab2d9316a2d71c740202669c76aca5
 
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
-
-secretEnv:
-  USERNAME: ""
-  PASSWRD: ""
-
-env:
-  DATA_PERM: "770"
-  GAME_ID: "739590"
-  GAME_PARAMS: ""
-  VALIDATE: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
 
 service:
   main:
     ports:
       main:
+        protocol: tcp
         port: 3001
-        protocol: HTTP
-        targetPort: 3001
-  udpgameport:
+  game:
     enabled: true
     ports:
-      udpgameport:
+      game:
         enabled: true
+        protocol: udp
         port: 3000
-        protocol: UDP
-        targetPort: 3000
+
+eco:
+  game:
+    id: 739590
+    user: ""
+    password: ""
+    validate: false
+    params: []
+  network:
+    PublicServer: true
+    Playtime: ""
+    DiscordAddress: ""
+    Password: ""
+    # server name
+    Description: "Truecharts ECO Server"
+    # server description
+    DetailedDescription: "Vanilla ECO game"
+    ServerCategory: "None"
+    RemoteAddress: "localhost:3000/"
+    IPAddress: "Any"
+    GameServerPort: "{{ .Values.service.game.ports.game.port }}"
+    WebServerPort: "{{ .Values.service.main.ports.main.port }}"
+    WebServerUrl: "localhost:3001"
+    Rate: 20
+    MaxConnections: -1
+    UPnPEnabled: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              enabled: true
+              type: tcp
+            readiness:
+              enabled: true
+              type: tcp
+            startup:
+              enabled: true
+              type: tcp
+          env:
+            STEAMCMD_DIR: "{{ .Values.persistence.steamcmd.mountPath }}"
+            SERVER_DIR: "{{ .Values.persistence.serverfiles.mountPath }}"
+            GAME_ID: "{{ .Values.eco.game.id }}"
+            USERNAME: "{{ .Values.eco.game.user }}"
+            PASSWRD: "{{ .Values.eco.game.password }}"
+            GAME_PARAMS: '{{ join " " .Values.eco.game.params }}'
+            VALIDATE: "{{ .Values.eco.game.validate }}"
 
 persistence:
-  serverfiles:
-    enabled: true
-    mountPath: /serverdata/serverfiles
   steamcmd:
     enabled: true
     mountPath: /serverdata/steamcmd
+  serverfiles:
+    enabled: true
+    mountPath: /serverdata/serverfiles
+  network-config:
+    enabled: true
+    type: configmap
+    objectName: eco-network
+    mountPath: /serverdata/serverfiles/Configs/Network.eco
+    subPath: Network.eco
+    readOnly: true
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/factorio/Chart.yaml

@@ -1,27 +1,27 @@
 apiVersion: v2
-kubeVersion: ">=1.16.0-0"
-name: factorio
-version: 4.0.9
 appVersion: "stable"
-description: "This Chart Chart will download the latest stable release of the game, generate the map and you're ready to play."
-type: application
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.9
 deprecated: false
+description: A game in which you build and maintain factories.
 home: https://truecharts.org/charts/incubator/factorio
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/factorio.png
 keywords:
   - factorio
   - GameServers
-sources:
-  - https://github.com/truecharts/charts/tree/master/charts/incubator/factorio
-  - https://www.factorio.com/
-dependencies:
-  - name: common
-    repository: https://library-charts.truecharts.org
-    version: 13.2.2
+kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
     name: TrueCharts
     url: https://truecharts.org
+name: factorio
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/factorio
+  - https://github.com/factoriotools/factorio-docker
+type: application
+version: 4.1.1
 annotations:
   truecharts.org/catagories: |
     - GameServers

charts/incubator/factorio/questions.yaml

@@ -4,9 +4,11 @@ questions:
 # Include{global}
 # Include{workload}
 # Include{workloadDeployment}
+
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
                                 - variable: env
                                   group: App Configuration
                                   label: Image Environment
@@ -42,8 +44,8 @@ questions:
                                         label: Update server mods BEFORE starting the server
                                         description: If mods should be updated before starting the server
                                         schema:
-                                          type: string
-                                          default: ""
+                                          type: boolean
+                                          default: false
                                       - variable: USERNAME
                                         label: Factorio.com Username
                                         description: Import your factorio.com username
@@ -106,7 +108,7 @@ questions:
 # Include{persistenceRoot}
         - variable: config
           label: App Config Storage
-          description: Container Path factorio
+          description: Stores the Application Config.
           schema:
             additional_attrs: true
             type: dict
@@ -135,7 +137,7 @@ questions:
                   default: 0
               - variable: runAsGroup
                 label: runAsGroup
-                description: The groupID this App of the user running the application
+                description: The groupID of the user running the application
                 schema:
                   type: int
                   default: 0